…TweakTown News Hacking, Security & Privacy TL;DR: Microsoft threatened criminal charges against researcher Nightmare Eclipse for uncoordinated zero-day disclosures of six Windows vulnerabilities, sparking backlash from the cybersecurity community. Three exploits…
…But what caught cyber security researcher Kevin Beaumont’s eye was how Microsoft has responded. Microsoft suggests it plans to bring a criminal case against Nightmare Eclipse for failing to follow “proper…
…There are also 30 Information Disclosure CVEs, 27 Spoofing CVEs, 19 Security Feature Bypass CVEs, and 7 Denial of Service CVEs. In total, of the 206 CVEs addressed this Patch Tuesday, five…
…The disclosures continue a recent series of Windows security issues published by the same researcher, including earlier exploits named BlueHammer and RedSun. Those vulnerabilities reportedly resulted in administrator-level access through Windows…
Microsoft Faces Backlash Over Criminal Probe Threat Against Security Researcher by Chris Harper — Saturday, May 30, 2026, 02:45 PM EDT Windows 11 has been his by a series of zero-day…
Microsoft working on Defender patch for RoguePlanet zero-day By Sergiu Gatlan June 17, 2026 04:32 AM Microsoft confirmed that it's working on a security patch for a Defender zero…
…In this day and age, when AI-powered security research has arguably made the standard 90-day disclosure-to-patch window completely obsolete, and both time-until-exploit and unused exploits are…
…Part of a deliberate campaign MiniPlasma is yet another Windows zero-day disclosure from Chaotic Eclipse in the past six weeks. The researcher started in April with BlueHammer, a Windows Defender local…
…While the exact circumstances that triggered this spree of exploit leaks are still unclear, Nightmare Eclipse previously said that these disclosures are in protest of how Microsoft's Security Response Center (MSRC…
…However, Microsoft indicated that the vulnerabilities published by the security sleuth weren't shared with the company in advance, as highlighted in its Coordinated Vulnerability Disclosure (CVD) policy. Consequently, the company claimed…