Industry group wants software holes kept mum