. . have a custom of including with their announcements sample exploit code for use in testing your system and any fixes you apply - so "theoretical research" doesn't stay theoretical very long.