Microsoft wouldn't look at a bug report without a video. Researcher maliciously complied

Vulnerability analyst Will Dormann criticized Microsoft’s Security Response Center for refusing to review his vulnerability reports without a video proof-of-concept, prompting him to submit a satirical 15-minute video after already providing screenshots and clear steps. The piece contrasts MSRC’s request with common practices at CISA VINCE and the UK NCSC, which typically don’t mandate videos, while Microsoft maintains that additional evidence can help assessment and bug bounty decisions.