Firms failing to disclose IoT vulnerabilities. Issue 12 (December 2018)