This is the reason security researchers started demanding deadlines before publishing their findings publicly. Forcing them to do damage control by publishing their dirty laundry turned out to be the best way to motivate companies to listen to reports.