… The company accused the researcher of bypassing coordinated vulnerability disclosure standards. Nightmare Eclipse disputes this. The researcher claims Microsoft deleted the Security Response Center account used to file the original bug reports and refused further contact. …
… A public dispute between Microsoft and security researcher Nightmare Eclipse has escalated into a full-scale backlash from the cybersecurity community, after Microsoft threatened criminal prosecution over a series of uncoordinated zero-day disclosures. …
There's been some drama unfolding lately in the Windows security world, and today's episode comes from yet another apparent run-in of researcher Nightmare-Eclipse aka Chaotic Eclipse against Microsoft . …
… Microsoft previously reacted to the disclosures with warnings that it would work with law enforcement when people engage in "malicious activity causing real harm to our customers," leading many in the cybersecurity community to think Microsoft was threatening the researcher. …
… The dispute raises long-running questions about the responsibilities of security researchers, particularly when reporting to massive tech companies with deep pockets. …
… Google researchers looked at DRAM errors in its data centers back in 2009 and were surprised to find that DRAM error rates "are orders of magnitude higher than previously reported, with 25,000 to 70,000 errors per billion device hours per Mbit and more than 8 percent of DIMMs affected by errors per… …
… YellowKey outwits BitLocker A security researcher known as Nightmare-Eclipse—previously responsible for his RedSun and MiniPlasma proof-of-concept exploits—has continued his dispute with Microsoft by publishing another proof-of-concept exploit for a BitLocker vulnerability. …
… After careful investigation, we determined that the access patterns demonstrated are consistent with intended protections and existing controls, and do not represent a bypass of a security boundary or unauthorized access to data,” says David Weston, corporate vice president of Microsoft Security, i… …
… The biggest problem is that not only do they have nondisclosure agreements, they also have a mandatory arbitration clause, which means disputes never see the light of day. Disputes are resolved basically in a black box, not in a court, and not made public. …
Security researcher Dor Zvi and his team at the cybersecurity firm he cofounded, RedAccess, analyzed thousands of vibe-coded web applications created using the AI software development tools Lovable, Replit, Base44, and Netlify and found more than 5,000 of them that had virtually no security or auth… …
