… In response to the unnecessary risk created by these disclosures, our security teams have been working around the clock to understand the impact, protect our customers, and develop security updates. …
… The number of bugs in each vulnerability category is listed below: 61 Elevation of Privilege Vulnerabilities 6 Security Feature Bypass Vulnerabilities 31 Remote Code Execution Vulnerabilities 14 Information Disclosure Vulnerabilities 8 Denial of Service Vulnerabilities 13 Spoofing Vulnerabilities W… …
… We also support coordinated vulnerability disclosure, a widely adopted industry practice that helps ensure issues are carefully investigated and addressed before public disclosure, supporting both customer protection and the security research community." However, this disclosure was arguably anythi… …
… Nightmare Eclipse has not been arrested but could face lawsuits or criminal referrals, depending on how authorities interpret the disclosures. Security researchers warn that future disclosure behaviour could change if companies respond with aggressive legal threats rather than collaboration. …
… "As I mentioned in that post, going forward I would be doing full public disclosure for any security bugs I found in VSCode." This follows another stream of zero-days in various Microsoft products disclosed by an anonymous security researcher using the 'Nightmare Eclipse' online handle who also exp… …
Security Critical Microsoft Excel bug weaponizes Copilot Agent for zero-click information disclosure attack Could steal sensitive personal and financial data After a whopper of a Patch Tuesday last month , with six Microsoft flaws exploited as zero-days, March didn't exactly roar in like a lion. …
… But what caught cyber security researcher Kevin Beaumont’s eye was how Microsoft has responded. …
… The disclosures continue a recent series of Windows security issues published by the same researcher, including earlier exploits named BlueHammer and RedSun. …
… Security researcher Will Dormann of Tharros independently verified the results. …
… While the exact circumstances that triggered this spree of exploit leaks are still unclear, Nightmare Eclipse previously said that these disclosures are in protest of how Microsoft's Security Response Center MSRC handled the disclosure process for other security flaws they reported in the past. …