Menu

Post image 1
Post image 2
1 / 2
0

Microsoft's Clash With Researcher Nightmare Eclipse Exposes Cracks in Vulnerability Disclosure

WebProNews·Dave Ritchie·about 14 hours ago
#kHw3zY09
Reading 0:00
15s threshold

Microsoft drew sharp criticism this week after it warned a security researcher known as Nightmare Eclipse that its Digital Crimes Unit would pursue those enabling criminal activity. The exchange centers on six vulnerabilities the researcher made public in recent weeks. Some now see active exploitation in the wild. The flaws touch core Windows components. BlueHammer, RedSun, UnDefend and YellowKey affect the Defender antivirus engine and BitLocker disk encryption. Additional issues trace back to older code. The researcher posted proof-of-concept exploits on GitHub and GitLab. Both platforms, one owned by Microsoft, banned the accounts shortly after. Microsoft responded with a blog post on May 28. It stressed coordinated vulnerability disclosure. “Uncoordinated disclosures that put proof-of-concept code for unpatched vulnerabilities into the hands of bad actors are never justifiable and have real-world consequences,” the company wrote.…

Continue reading — create a free account

Join HashtagPLUS to read full articles, follow hashtags, vote, and join the conversation.

Read More