Microsoft pledges not to sue security researchers after zero-day disclosure backlash (therecord.media)

• Microsoft states it will not pursue legal action against security researchers for publishing vulnerabilities.
• Company acknowledges failures in researcher relations and reverts to 'Coordinated Vulnerability Disclosure' terminology.
• Researcher Nightmare Eclipse announces new Secure Boot zero-day bypassing BitLocker.

"Microsoft clarified it will not pursue legal action against security researchers who publish vulnerabilities, following criticism of a previous blog post that condemned uncoordinated zero-day releases. The company acknowledged failures in handling researcher relationships and reverted to using the term 'Coordinated Vulnerability Disclosure'. This came after researcher Nightmare Eclipse released multiple Windows zero-days and announced a new Secure Boot vulnerability."