Microsoft Softens Stance on 0-Day Researcher Legal Action
TL;DR. Microsoft clarified it will not pursue legal action against security researchers after a public dispute over Windows zero-day disclosures. - The company's initial statement condemned exploit code publication, threatening law enforcement involvement. - This sparked criticism from the security community, fearing a chilling effect on vulnerability research. - Microsoft's updated position aims to reassure researchers and differentiate between malicious and responsible disclosure.
- Microsoft faced criticism for threatening legal action against a researcher who disclosed Windows zero-days.
- The company's initial stance warned against publishing exploit code for unpatched flaws.
- A public backlash from the security community prompted Microsoft to issue a revised statement.
- Microsoft now states it has no intention to pursue action against individuals conducting or publishing security research.