The company profiled in the article ("ex-NSA") isn't exactly the first player in its space - e.g. VUPEN is a pretty established company (http://www.vupen.com/en

The company profiled in the article ("ex-NSA") isn't exactly the first player in its space - e.g. VUPEN is a pretty established company (http://www.vupen.com/english/services/lea-index.php http://www.vupen.com/english/services/lea-index.php), and there have been earlier articles on this market (for instance http://www.forbes.com/sites/andygreenberg/2012/03/23/shopping-for-zero-days-an-price-list-for-hackers-secret-software-exploits/ http://www.forbes.com/sites/andygreenberg/2012/03/23/shoppin... is pretty readable). This may be a very good book, worth reading, but it's not really news.