Real security researchers disclose responsibly

IT security vendors have a duty to disclose vulnerabilities quickly and responsibly, even if they've been the victims of an attack. I’ve said it before and I’ll say it again: disclosure is a two-way affair, which when executed properly benefits everyone, including the victim.