Russian, Chinese actors using patched vulnerability.
Affecting "a small cohort of members".
Amid ongoing exploits of patched vulnerability.
Technology commercialised despite not being ready for production use.
Taking effect December 1.
ARIN also to receive restitution.