If it's true, it's a way for Russia to find security flaws and ensure they're not patched in good ways.