Tag: Coordinated Vulnerability Disclosure (CVD)

Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal
News

Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal

Microsoft has made a strong case for Coordinated Vulnerability Disclosure (CVD), calling on researchers to share their findings and provide impacted businesses with a chance to better understand the implications and take corrective action before they are made public. This comes after a researcher by the name of Chaotic Eclipse (also known as Nightmare-Eclipse) revealed information about several zero-day vulnerabilities that have affected several Windows components over the past month, including Defender and BitLocker. The researcher claimed that Microsoft's handling of the vulnerability disclosure process had broken down. Numerous zero-day vulnerabilities have been made public in recent weeks, according to the tech giant. "The disclosures put our users at needless risk, and Microsof...