Kevin Mitnick is now buying zero day exploits and selling them to the highest bidder. Even if he didn’t have anything to do with finding the exploit, he is one of the ones selling them. “Gray hat” may be a way of stating what he does so underhandedly.