Bombing campaigns are surprisingly ineffective at winning wars. Iran could possibly kill some people but it would be very far from winning that way. Not in an hour, not in a decade

the in depth technical details

TL;DR; sigalarm handler calls syslog which isn't safe to call from a signal handler context.

Their example exploit needed about 10k attempts to get a remote shell so it's not fast or quiet, but a neat find regardless