All that happened was the method Cyberlink to decrypt AACS used was
semi-compromised. Their implemention kept the key in memory, a key
which is needed to legally decrypt the content protection. What is likely
going to happen is that specific key will be revoked, and Cyberlink
will have to issue an update in order to play newer titles. CSS didn't
have a good way to revoke the keys, AACS does.
Waiting to see what Cyberlink and AACS said happened, but I don't see that AACS was cracked.