Researcher: Apple had two months to fix critical QuickTime bug

A critical bug in QuickTime was reported to Apple two months before a second researcher independently revealed the vulnerability this week, according to the director of a bug bounty program who argues that companies must patch their bugs faster.