https://www.haktechs.com/the-log4j-debacle-showed-again-that-public-disclosure-of-0-days-only-helps-attackers/
The Log4j debacle showed again that public disclosure of 0-days only helps attackers