It seems to me that they're converting at about the same percentage rate bugs->exploits as before, they're just getting a lot more press than the old bug reports did.