This question already has an answer here:
I've been doing some pretty interesting research that involves abusing a particular technology to carry out malicious behavior. Normally, upon completion of my research, I'd hand over all of my work before release so that the affected parties could resolve the problems I uncover. In this case, however, the abusable element is a core aspect of the affected technology and will be extremely difficult (if not impossible) to patch. I very much want to release and talk about my research, but I'm worried that making the details available beyond myself could result in malicious use of my research. The technology affected is very widely used and could result in a huge financial loss for parties that make use of it.
How can I release this research and still be ethical? Should I even do so? Any advice would be appreciated.