researcher threatened for disclosing vulnerabilities