Nightmare Eclipse incident shows the researcher-vendor fights may never fully go away

Microsoft threatened criminal legal action against security researcher 'Nightmare Eclipse' for publicly disclosing zero-day vulnerabilities without prior coordination. The researcher claimed Microsoft refused to communicate, deleted their security response account, and flagged their GitHub account, escalating a public dispute over vulnerability disclosure practices.