SECURITYTHE REGISTER
Microsoft reaches for olive branch after public dustup with 0-day researcher
Microsoft softened its stance after initially threatening legal action against researcher Nightmare-Eclipse for publicly disclosing Windows zero-day vulnerabilities. The researcher released exploit code, prompting Microsoft to face backlash from the security community. Microsoft's updated statement emphasized no legal pursuit against security researchers but stopped short of addressing specific allegations.
Mentioned
Related Signal
Adjacent reporting
- Microsoft's Zero-Day Legal Threats Spark Backlash
- Microsoft is threatening legal action for disclosing exploits
- Microsoft calls zero-day releases ‘never justifiable’ as researcher threatens to drop more
- New Microsoft Defender “RedSun” zero-day PoC grants SYSTEM privileges
- Mystery Microsoft bug leaker keeps the zero-days coming
- Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal