On Tuesday, Microsoft announced the resolution of two significant zero-day vulnerabilities that were disclosed by a researcher known as Nightmare Eclipse. This individual has been at odds with the tech giant over the handling of security flaws. In recent months, Nightmare Eclipse has unveiled several serious vulnerabilities, which raised concerns about their potential exploitation. The researcher claims that these disclosures were prompted by Microsoft's failure to uphold a prior agreement concerning the vulnerabilities under discussion. In a statement made in March, Nightmare Eclipse expressed frustration, stating, "Someone violated our agreement and left me homeless with nothing." This ongoing conflict highlights the challenges in the relationship between independent researchers and large corporations regarding vulnerability disclosures and security practices.
Microsoft Addresses Zero-Day Vulnerabilities Amid Controversy
In a recent move, Microsoft has patched two critical zero-day vulnerabilities that were brought to light by a researcher amid ongoing tensions.
3 min readTechnology