Microsoft threatens legal action over exploit disclosures

Microsoft is reportedly preparing to take legal action against an individual known as 'Nightmare Eclipse' for publicly disclosing zero-day exploits. The company alleges that the individual failed to follow proper coordination protocols for vulnerability disclosure. In response to the public proof-of-concept code shared online, Microsoft has also disabled accounts associated with Nightmare Eclipse on platforms like GitHub and GitLab. This situation highlights the ongoing tension between security researchers who advocate for rapid disclosure and companies like Microsoft that prefer a more controlled coordination process to mitigate potential risks.