Vulnerability disclosure hits record levels