keeping this information secret until solution is found seems sensible to me unless thers clear evidence the attack is being exploited  , assuming of course those with the knowledge dont dump and profit from this privileged information , imo anyway