Microsoft hits out over irresponsible vulnerability disclosure

Microsoft has hit back after a disgruntled security researcher published proof of concept hacks for six zero-day vulnerabilities in its products without sharing details with Redmond prior to release, saying they had put its customers at “unnecessary risk”.

Microsoft hits out over irresponsible vulnerability disclosure. Microsoft has hit back after a disgruntled security researcher published proof of concept hacks for six zero-day vulnerabilities in its products without sharing details with Redmond prior to release, saying they had put its customers at “unnecessary risk”. Perceived by some as a malicious actor and by others as a Robin Hood-like cyber hero, the researcher, known to the community as Nightmare Eclipse among other related handles, appears to be motivated by personal grievance towards Microsoft. Their identity has not been made public but Computer Weekly understands that within the past few days they have been banned from code repositories GitHub and GitLab. They have threatened further disclosures, telling onlookers to mark 14 July in their diaries . Microsoft said that every ye...