[freehunter]

The law gives them time to try to fix the problem before telling every hacker in the world about it.

[mannykannot]

In this context, there are two sorts of black-hat hackers: those who already know of the exploit, and those who do not. If it takes over a month to shut out the latter, then there is another problem.