November 23, 2015 Bug bounty layover. United Airlines waits six months to patch serious vulnerability