Signal

Microsoft condemns public zero-day disclosures amid escalating feud with researcher

Evidence first: scan the strongest sources, then decide whether to go deeper.

Published 2026-05-28 12:00 UTCUpdated 2026-05-28 23:20 UTC
rss
cveexploitssecurity_policyincident_response
Source links open
Source links and full evidence are open here. Pro adds archive history, compare-over-time, alerts, exports, and workflow. Business adds Feed API integrations and team usage.
No card needed for the free brief.
Evidence trail (top sources)
top sources (4 domains)domains are deduped. counts indicate coverage, not truth.
4 top sources shown
Overview

Microsoft has strongly criticized the public disclosure of multiple unpatched Windows zero-day vulnerabilities by a security researcher known as Nightmare Eclipse (aka Chaotic Eclipse).

Entities
MicrosoftGitHubGitLabNightmare EclipseChaotic Eclipse
Score total
1.33
Momentum 24h
4
Evidence documents
-
Independent publishers
-
Independent origins
-
Primary sources
-
Secondary sources
-
Source types
-
Duplicate ratio
0%
Why now
  • Recent public release of six zero-day exploits by a prominent researcher.
  • Microsoft's legal threats and law enforcement involvement escalate the dispute.
  • Some disclosed vulnerabilities remain unpatched and are actively exploited in the wild.
Why it matters
  • Uncoordinated zero-day disclosures increase risk of exploitation before patches are available.
  • Legal actions against researchers may impact vulnerability disclosure norms and security research community.
  • Active exploitation of released zero-days poses immediate threats to Windows users.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: medium
Recurring claims
  • Microsoft condemns uncoordinated zero-day disclosures that put customers at risk
  • Researcher Nightmare Eclipse publicly released six Windows zero-days and exploit code without prior coordination
  • Microsoft is pursuing legal action and has involved law enforcement following the disclosure
How sources frame it
  • Microsoft: supportive
  • Security Researchers: neutral
All evidence
All evidence
Microsoft Threatens Legal Action Over Zero-Day Leaks
Bankinfosecurity · bankinfosecurity.com · 2026-05-28 23:20 UTC
Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal
Thehackernews · thehackernews.com · 2026-05-28 13:53 UTC
Microsoft Condemns "Uncoordinated" Zero Day Disclosures
Infosecurity Magazine · infosecurity-magazine.com · 2026-05-28 12:00 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 4Origin domains: 4Duplicates: -
Showing 4 / 4
Top publishers (this list)
  • Bankinfosecurity (1)
  • Theregister (1)
  • Thehackernews (1)
  • Infosecurity Magazine (1)
Top origin domains (this list)
  • bankinfosecurity.com (1)
  • theregister.com (1)
  • thehackernews.com (1)
  • infosecurity-magazine.com (1)