Illegal if I discover a security flaw in a product by a publicly traded US company & buy puts ?

Are either of these scenarios illegal ?

1 ) I discover a security flaw in a product by a publicly traded US company, buy puts & then release my findings publicly, sell puts after stock declines.

2 ) I discover a security flaw in a product by a publicly traded US company, buy puts, publicly release a free security testing tool on cybersecurity sites to show how the flaw can be exploited, release my findings publicly, sell puts after stock declines.

​