Comment by ucaetano

Company finds a security vulnerability caused by a bug. Logs show that it has never been used by anyone. It patches the vulnerability.

[Honest question] Should the company announce it publicly?

PS: Keeping in mind that this is part of the Murdoch vs. Google war going on for about 10 years:

https://www.npr.org/sections/money/2009/11/murdoch_vs_google...

https://www.thedrum.com/news/2017/03/28/timing-everything-ru...

https://www.theverge.com/2018/1/22/16920254/news-corp-rupert...

[Edit: added the "Honest Question" tag]

Edit 2: Related post by Google:

https://blog.google/technology/safety-security/project-strob...