logo

Microsoft Calls the Zero-Day Dumps Irresponsible. The Researcher Says Microsoft Started It.

ID: f1fd6174-9f48-5587-8b5e-811da54234e0

STIX ID: report--f1fd6174-9f48-5587-8b5e-811da54234e0

Feed Name: Security Affairs

Threat Score
85/100

Date Published: 2026-05-29

Date Updated: 2026-05-29

Author: Pierluigi Paganini

...
...

A researcher known as "Chaotic Eclipse" publicly released details and proof-of-concept code for six unpatched Windows zero-days (affecting components such as Defender and BitLocker) without coordinating with Microsoft; three of the disclosed flaws (BlueHammer, RedSun, UnDefend) have since been observed exploited in the wild, prompting Microsoft to condemn the uncoordinated disclosure, work on mitigations, and threaten legal action while the researcher accuses Microsoft of ignoring reports and retaliating—additionally, the researcher’s accounts were removed and they have threatened further releases.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.