Security firm should not have had the buggy software

A security research outfit has released details of a "critical" flaw in a security tool made by auditing and tax giant PwC.