Microsoft calls for coordinated vulnerability disclosure after zero-day disclosures put customers at risk

Summary

Microsoft addresses the recent public disclosure of zero-day vulnerabilities that were not shared with the company beforehand, putting customers at risk. The article emphasizes the importance of Coordinated Vulnerability Disclosure (CVD), the industry standard where researchers share findings with affected vendors before public release, allowing time to understand and address the impact. Microsoft highlights its ongoing partnership with hundreds of security researchers through this process.