Here's some relevant work:
http://spritesmods.com/?art=hddhack&page=1It's not the exploits themselves that are surprising, but the sophisticated deployment often years prior to specimen disclosure or similar research. Docs indicate there are implants across the board that target free software OSes aplenty.