Microsoft Threatens Legal Action, Faces Backlash
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- Microsoft posted a blog entry that suggested a criminal referral and possible legal action against security researcher Nightmare Eclipse for publicly disclosing bugs.
- Nightmare Eclipse retorted by threatening to dump further zero‑day exploits if Microsoft does not address his concerns.
- Microsoft labeled the researcher’s disclosures as “irresponsible” and called the release of zero‑day vulnerabilities “never justifiable.”
- Microsoft Security Response Center (MSRC) defended its coordinated vulnerability disclosure policy, calling it a shared responsibility.
- TechCrunch and other outlets reported widespread backlash from the security community toward Microsoft’s approach, highlighting the tension over responsible disclosure.
Why it matters: The security community’s outcry puts pressure on Microsoft to soften its legal‑threat stance, while Nightmare Eclipse’s threat to dump more zero‑days raises the risk of unpatched exploits. In short, Microsoft’s reputation and vulnerability‑management process are at stake, and users could face heightened exposure.
Ask SkimNews
