Emsisoft kept their knowledge of the vulnerability a secret until now, so that an immediate fix would not be deployed