British journalists should be asking if GCHQ knew of the vulnerability being used to attack NHS but kept it secret so they could use it.