Maybe a grey hat should scan for all the vulnerable servers they can find, exploit them, and then patch them.