Microsoft Threatens Security Researcher Over Vulnerability Disclosure

TL;DR. Microsoft faced criticism for threatening a security researcher with criminal investigation after a zero-day vulnerability disclosure. - The company accused the researcher of illegal access to an internal server after reporting a security flaw. - This incident sparked debate within the cybersecurity community about responsible disclosure practices. - Microsoft later retracted its accusation, acknowledging the researcher's intent to improve security.

• Microsoft threatened a security researcher with legal action for reporting a zero-day vulnerability.
• The dispute highlights ongoing tensions between vendors and independent researchers over disclosure rules.
• The cybersecurity community reacted strongly, criticizing Microsoft's aggressive stance.
• Microsoft eventually withdrew its threats, admitting the researcher acted in good faith.

Back to QLANKR News