Hacker has software security firms smiling