Microsoft under fire for threatening security researcher with criminal investigation

A security researcher known as “Nightmare Eclipse” publicly released details and exploit code for multiple unpatched Microsoft vulnerabilities (affecting Defender and BitLocker). Microsoft has criticized the disclosures, threatened legal action via its Digital Crimes Unit, and said some of the published zero‑days have been used in real‑world attacks according to Microsoft and CISA; the post also covers backlash from the security community over disclosure practices.