TLDR Tech / InfoSec
Microsoft Tries to Calm Legal Threat Fears After Zero-Day Disclosure Backlash
After researcher Nightmare Eclipse dumped PoCs for several unpatched Microsoft flaws (RedSun CVE-2026-41091, UnDefend CVE-2026-45498, BlueHammer CVE-2026-33825, YellowKey CVE-2026-45585, plus GreenPlasma and MiniPlasma) following a soured disclosure dispute, Microsoft's May 27 reference to its Digital Crimes Unit sparked backlash read as a legal threat, prompting a June 1 clarification that it will not pursue action against legitimate security research.
Read the full story