I am at a loss as to why the news supposed to report it? That is part an parcel of investigative journalism.

It maybe because the vulnerabilities still exist and they don't want the general public to know about it. Yet this rings hollow as the bad guys still know about it.