If Calle is telling people about it, the attack has already happened

Nah. He'd say so if it were being exploited. He also got it wrong. Its run --offline, not shut down. Two very different things.