PwC sends 'cease and desist' letters to researchers who found critical flaw