Specific warnings about code used in potential attacks are sent to regulators, say security experts.