… In response to the unnecessary risk created by these disclosures, our security teams have been working around the clock to understand the impact, protect our customers, and develop security updates. …
… Download Now Related Articles: Microsoft April 2026 Patch Tuesday fixes 167 flaws, 2 zero-days Microsoft March 2026 Patch Tuesday fixes 2 zero-days, 79 flaws Microsoft releases Windows 10 KB5087544 extended security update Windows 11 KB5089549 & KB5087420 cumulative updates released Microsoft relea… …
One security researcher discovered a previously unpatched vulnerability in Windows and reported it to the Microsoft Security Response Center. …
… Nightmare Eclipse has not been arrested but could face lawsuits or criminal referrals, depending on how authorities interpret the disclosures. Security researchers warn that future disclosure behaviour could change if companies respond with aggressive legal threats rather than collaboration. …
… "As I mentioned in that post, going forward I would be doing full public disclosure for any security bugs I found in VSCode." This follows another stream of zero-days in various Microsoft products disclosed by an anonymous security researcher using the 'Nightmare Eclipse' online handle who also exp… …
… "The issue occurs when Microsoft Office improperly handles memory pointers, potentially allowing an attacker to manipulate how the application accesses memory," Bicer said. ® patch tuesday security microsoft
… But what caught cyber security researcher Kevin Beaumont’s eye was how Microsoft has responded. …
… The disclosures continue a recent series of Windows security issues published by the same researcher, including earlier exploits named BlueHammer and RedSun. …
… Security researcher Will Dormann of Tharros independently verified the results. …
… While the exact circumstances that triggered this spree of exploit leaks are still unclear, Nightmare Eclipse previously said that these disclosures are in protest of how Microsoft's Security Response Center MSRC handled the disclosure process for other security flaws they reported in the past. …