Microsoft is facing criticism for its handling of zero-day exploits. Someone going by the name Nightmare Eclipse has been publicly feuding with the company, posting proof-of-concept exploit code. Some of their posts suggest that they're a disgruntled former employee. But what caught cyber security r...
Microsoft is facing criticism for its handling of zero-day exploits. Someone going by the name Nightmare Eclipse has been publicly feuding with the company, posting proof-of-concept exploit code. Some of their posts suggest that they're a disgruntled former employee. But what caught cyber security researcher Kevin Beaumont's eye was how Microsoft has responded.
Microsoft suggests it plans to bring a criminal case against Nightmare Eclipse for failing to follow "proper coordination" in disclosing vulnerabilities. They also disabled Nightmare Eclipse's GitHub, GitLab, and Microsoft Security Response Center accounts disabled. As Beaumont point …
This story was first published by The Verge. Read the original report
We use cookies to run this site and, with your consent, to measure traffic and improve our content. Necessary cookies are always on. You can accept all cookies or choose which ones to allow. Privacy policy.