Microsoft Addresses Zero-Day Disclosure Backlash, Legal Threats
TL;DR. Microsoft is responding to criticism regarding its legal threats against researchers disclosing zero-day vulnerabilities without coordination. - A researcher, Chaotic Eclipse, publicly disclosed multiple unpatched vulnerabilities in Microsoft products. - Microsoft alleges the uncoordinated disclosures put customers at unnecessary risk through PoC exploits. - The company has begun patching the disclosed vulnerabilities, some already exploited in the wild.
- Microsoft faced backlash for threatening legal action against security researchers.
- Chaotic Eclipse disclosed several zero-day vulnerabilities in Microsoft products.
- Some disclosed vulnerabilities, including BlueHammer and RedSun, have been exploited.
- Microsoft disabled the researcher's accounts on its vulnerability portal and GitHub.
Sources
- Microsoft Tries to Calm Legal Threat Fears After Zero-Day Disclosure Backlash — securityweek.com
- theregister.com — theregister.com