Microsoft clarifies it won't pursue legal action against security researchers after zero-day disclosure controversy

Summary

Microsoft has clarified it will not take legal action against security researchers who responsibly disclose vulnerabilities, following backlash over a blog post that condemned uncoordinated zero-day releases. The company's statement came after the pseudonymous researcher Nightmare Eclipse published Windows zero-day exploits, which Microsoft initially criticized as enabling criminal actors. Microsoft now says it is taking community feedback seriously and has no intention to pursue researchers conducting or publishing security research.

Source

bskyMicrosoft clarifies it won't pursue legal action against security researchers after zero-day disclosure controversytherecord.media