[detaro]

So attackers have now ~24 hours to exploit this unpublished security issue before the second stage, required passwords, becomes active.

[prophesi]

Hopefully passwords are implemented in a way to slow down brute-forcing. I guarantee the majority of them will be a simple word or number sequence.