In my working life where I do a fair bit of db work, I generally do a SELECT using the criteria before an UPDATE to see what I am likely going to affect. Avoids surprises, though I can't see too many for something like this.
So SELECT * FROM xf_thread WHERE title LIKE '%&%' (or something like that, I've never had to query for something like & before).