You missed my point. The lulz are from two things: a defense contractor pretending to be professional yet not even having its own house in order, and from having a known target with vulnerabilities.
Now that the name is out, someone is bound to do something, and perhaps we'll be seeing that name in the news next week.
All this has nothing to do with the amount of vulnerabilities found or existing in open or closed software. Entirely different debate, that.