Founder Eugene Kaspersky dismissed the comment, saying in a Twitter message that the flaw identified in the CIA leak was fixed “years ago.” A statement from his company said a second flaw apparently identified by the agency was fixed in December 2015.