But how did they know about it? Did the agents independently discover it? Did the model know about it because this vuln was public somewhere and systems weren't

But how did they know about it? Did the agents independently discover it? Did the model know about it because this vuln was public somewhere and systems weren't patched yet?