An embellishment can often be put down to a difference of opinion, and vendors have a reputation for downplaying vulnerabilities. In our case, the media report

An embellishment can often be put down to a difference of opinion, and vendors have a reputation for downplaying vulnerabilities. In our case, the media reported the researcher's claims uncritically alongside our denials. We decided the best strategy was to say as little as possible, as saying or doing more wouldn't improve the quality of the reporting and would only risk drawing more attention to the false claims. I think we had a good track record of handling vulnerabilities well, and we definitely had some nasty ones. But this was not one of them.