Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal

Microsoft's public criticism of researcher Chaotic Eclipse reveals a breakdown in coordinated vulnerability disclosure processes, resulting in unpatched zero-day vulnerabilities being exploited in the wild. The incident demonstrates how poor vulnerability management coordination between vendors and researchers can lead to active exploitation of critical security flaws in Windows Defender, BitLocker, and other essential components. GitHub's removal of the researcher's account further escalated tensions, highlighting the need for clear disclosure policies and established communication channels. Organizations relying on affected Microsoft products face immediate security risks due to these unpatched vulnerabilities.