{"id":612698,"date":"2026-05-30T21:57:12","date_gmt":"2026-05-30T21:57:12","guid":{"rendered":"https:\/\/www.newsbeep.com\/uk\/612698\/"},"modified":"2026-05-30T21:57:12","modified_gmt":"2026-05-30T21:57:12","slug":"microsoft-is-threatening-legal-action-for-disclosing-exploits","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/uk\/612698\/","title":{"rendered":"Microsoft is threatening legal action for disclosing exploits"},"content":{"rendered":"<p class=\"duet--article--dangerously-set-cms-markup duet--article--standard-paragraph _1044qizi _18mzr4b1 _18mzr4b0 _19wv7tc1\">Microsoft is facing criticism for its handling of zero-day exploits. Someone going by the name Nightmare Eclipse has been publicly feuding with the company, posting proof-of-concept exploit code. Some of their posts suggest that they\u2019re a disgruntled former employee. But what caught cyber security researcher <a href=\"https:\/\/doublepulsar.com\/microsofts-stance-on-zero-day-exploits-is-a-dumpster-fire-of-their-own-making-0946117940a4?postPublishedType=repub\" rel=\"nofollow noopener\" target=\"_blank\">Kevin Beaumont\u2019s<\/a> eye was how Microsoft has <a href=\"https:\/\/www.microsoft.com\/en-us\/msrc\/blog\/2026\/05\/a-shared-responsibility-protecting-customers-through-coordinated-vulnerability-disclosure?\" rel=\"nofollow noopener\" target=\"_blank\">responded<\/a>.<\/p>\n<p class=\"duet--article--dangerously-set-cms-markup duet--article--standard-paragraph _1044qizi _18mzr4b1 _18mzr4b0 _19wv7tc1\">Microsoft suggests it plans to bring a <a href=\"https:\/\/www.pcmag.com\/news\/microsoft-threatens-researcher-over-bug-reports-triggers-cybersecurity\" rel=\"nofollow noopener\" target=\"_blank\">criminal case<\/a> against Nightmare Eclipse for failing to follow \u201cproper coordination\u201d in disclosing vulnerabilities. They also disabled Nightmare Eclipse\u2019s GitHub, GitLab, and Microsoft Security Response Center <a href=\"https:\/\/thehackernews.com\/2026\/05\/microsoft-slams-public-zero-day.html\" rel=\"nofollow noopener\" target=\"_blank\">accounts disabled<\/a>. As Beaumont points out, \u201cIt\u2019s quite difficult to \u2018responsibly\u2019 report future vulnerabilities when you have been banned.\u201d<\/p>\n<p class=\"duet--article--dangerously-set-cms-markup duet--article--standard-paragraph _1044qizi _18mzr4b1 _18mzr4b0 _19wv7tc1\">What troubles Beaumont is that Microsoft has hired people who have done many of the exact same things. They\u2019ve employed people who have publicly posted zero-day exploits, some with criminal hacking convictions on their record. Microsoft has also purchased exploits from brokers.<\/p>\n<p class=\"duet--article--dangerously-set-cms-markup _1lkuyz88 _19wv7tc1\">If Microsoft\u2019s tactic is to try to criminalise not following often arbitrary \u201cresponsible disclosure\u201d frameworks, good luck defending that in court \u2014 because there\u2019s a whole clown car of prior decision making within Microsoft and facts which would emerge in that process.<\/p>\n","protected":false},"excerpt":{"rendered":"Microsoft is facing criticism for its handling of zero-day exploits. Someone going by the name Nightmare Eclipse has&hellip;\n","protected":false},"author":2,"featured_media":198041,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[59,696,50,1351,227,86,56,54,55],"class_list":["post-612698","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-gb","tag-microsoft","tag-news","tag-security","tag-tech","tag-technology","tag-uk","tag-united-kingdom","tag-unitedkingdom"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/612698","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/comments?post=612698"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/612698\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media\/198041"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media?parent=612698"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/categories?post=612698"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/tags?post=612698"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}