What qualifies as “responsible disclosure” though?

Microsoft urged coordinated disclosure after three Windows zero-days were actively exploited, increasing customer security risks.

Microsoft is struggling with published evidence of unpatched security vulnerabilities. The company is now threatening legal action.

A public spat between Microsoft and an independent security researcher reopens a long-running debate over who is responsible for securing software.

El caso ha provocado reacciones negativas de expertos y ex empleados de la propia compañía

Microsoft is under scrutiny after threatening legal action against a security researcher who disclosed unpatched vulnerabilities and exploit code in its products.

A researcher published unpatched bugs in Defender and BitLocker after Microsoft allegedly revoked their account. Microsoft invoked its Digital Crimes Unit.

What qualifies as “responsible disclosure” though?

Microsoft's Digital Crimes Unit weighs criminal charges against Nightmare Eclipse after six Windows zero-day exploits were publicly released in six weeks.

Microsoft is under fire for suspending accounts linked to Nightmare Eclipse, a researcher sharing zero-day exploit code, sparking debate among cybersecurity experts.

After a disgruntled security researcher published several zero-day exploits in recent weeks, Microsoft seemingly indicated criminal charges were in order.

An anonymous security researcher called “Nightmare Eclipse” has been publishing a series of significant security exploits against Microsoft Windows—including one that breaks…

Following days of criticism from the security community, Redmond dials back rhetoric, insists vulnerability hunters not in its legal crosshairs