Microsoft Threatens Legal Action After Publication of Six Windows Zero-Days (heise.de)

• Microsoft threatens researcher Nightmare Eclipse with lawsuit and police
• Six Windows zero-days disclosed in six weeks
• Researcher denies CVD violation, claims MSRC account suspended
• Experts warn of negative impact on security research

"Microsoft has threatened legal action against security researcher Nightmare Eclipse, who disclosed six unpatched Windows zero-days in six weeks. The company criticizes the lack of coordinated vulnerability disclosure (CVD). Nightmare Eclipse denies the allegations, claiming his MSRC account was unjustly suspended. Experts warn of chilling effects on security research cooperation."