>and may make it out into the public for anyone to take advantage of. Why would they do that? Its more likely they'll be kept for other attacks or sold to nati

>and may make it out into the public for anyone to take advantage of. Why would they do that? Its more likely they'll be kept for other attacks or sold to nation states for vast profits. I also suspect there's nothing magical going on at the NSA. Whatever zero days they have are probably had by other intelligence agencies and hacking groups. Whether to report them publicly is a political decision that these groups have zero incentive to make. Ethical researchers and white hats, from my understanding, are a very small part of the scene, or at least the part of the scene that gets real results.