Yeah - if they were able to demonstrate this at DEFCON then it had most likely been exploited in the wild somewhere as well.