They seem to have left out a point in their "Our immediate response" section:

- within 8 months: published the details after researchers publish it first.