> The only other option is that it wasn't random, but some event led to both discoveries. Perhaps a hint was around, a new method of > finding vulnerabilities

> The only other option is that it wasn't random, but some event led to both discoveries. Perhaps a hint was around, a new method of > finding vulnerabilities, or anything at all that could nudge people's minds in that direction. As somebody who has witnessed several cases of simultaneous discovery of security vulnerabilities, this is exactly how it happens. Some vaguely related event happens which causes multiple researchers to all start looking in the same place.