Nightmare Eclipse incident shows the researcher-vendor fights may never fully go away

Microsoft publicly clashed with a security researcher known as "Nightmare Eclipse" after the researcher released proof-of-concept exploits for six zero-day vulnerabilities (three of which were reportedly exploited in the wild before patches). The incident highlights failures and tensions in coordinated vulnerability disclosure, vendor-researcher trust, and the broader risks posed by public disclosure and emerging accelerants like AI that may increase discovery and exploitation of bugs.