When IBM filtered those unpatched security flaws by severity, however, Google came out as the least likely to patch critical security bugs in its software that would allow a hacker to completely hijack a target system, leaving 33% of those high severity flaws unpatched over the first half of the year.

FORBES: Connect

But the ICO said the fine reflected the severity of the security lapse, adding that it was among the most serious it had ever seen.

BBC: Sony fined over 'preventable' PlayStation data hack

To demonstrate the potential severity of these security vulnerabilities, the researchers tracked the Skype accounts of about 20 volunteers as well as 10, 000 random users over a two-week period, using techniques that neither harmed nor disrupted the service, utilized any requests for which the service was not designed nor interfered with users.

FORBES: Unfixed Skype Bug Reveals Users' Locations, Downloads

Where disclosure is appropriate, the guidance suggests that are a number of key subjects that should be provided in the disclosure, including the potential costs and consequences to the registrant of the material cyber security risks, the number and severity of previous cyber incidents, and the existence of relevant insurance coverage.

FORBES: Disclosing Cyber Security Incidents: The SEC Weighs In

Scott Totzke, vice-president of Blackberry's security group, said the number and severity of mobile attacks he's seen so far have been minimal -- but that that could easily change.

CNN: Smartphone security threats likely to rise

Heffner, like most security researchers revealing dangerous bugs, argues that releasing an exploit may be the most effective way to draw attention to severity of the problem and convince both browser and router makers to fix the fundamental vulnerability.

FORBES: "Millions" Of Home Routers Vulnerable To Web Hack