Hot on the heels of IBM ignoring a vulnerability disclosure from a security researcher, that could result in unauthenticated remote code execution as root, because he wasn't a paying customer...
(Yes, they later said there had been a process error in acknowledging the disclosure, but only after they were ripped to shreds in the security press: https://www.theregister.co.uk/2020/04/21/ibm_security_vulnerabilities/)
...they're now issuing take down requests for vulnerabilities in their software listed in exploit-db: https://twitter.com/offsectraining/status/1258155194535292928
I won't give my opinions about IBM's security practices or capabilities on here as I was always told if you don't have anything nice to say don't say anything at all! 
