ZDI Slams Microsoft for Not Crediting It in Last Week’s Patch Tuesday

The article describes backlash from security researchers and Trend Micro’s Zero Day Initiative toward Microsoft for poor transparency and coordination in vulnerability disclosure—highlighting CVE-2024-38112 where researchers were initially uncredited, inconsistent CVE/CVSS treatment across reports, and concerns that rushed or unclear patching practices harm end users; it also notes an exploit demonstrated at Pwn2Own and Microsoft’s subsequent patching and partial crediting.