Google Online Security Blog: Disclosing vulnerabilities to protect users

http://security.googleblog.com/2016/10/disclosing-vulnerabilities-to-protect.html