Microsoft under fire for threatening security researcher with criminal investigation

A public spat between Microsoft and an independent security researcher reopens a long-running debate over who is responsible ...

Microsoft bans security researcher after Windows 11 BitLocker zero-day exploit release

A researcher accuses Microsoft of banning their GitHub and Microsoft accounts after publishing a Windows 11 BitLocker ...
Morning Overview on MSN

Microsoft just rushed patches for two Defender zero-days code-named 'RedSun' and 'UnDefend' — both already being exploited right now on Windows devices

Microsoft pushed emergency patches this week for two zero-day vulnerabilities in Windows Defender, the antivirus software ...
NewsBytes

Microsoft faces backlash over action against researcher sharing exploit code

Microsoft is under fire for suspending accounts linked to Nightmare Eclipse, a researcher sharing zero-day exploit code, ...
TweakTown

Microsoft threatened a security researcher with criminal charges, and the cybersecurity community isn't having it

Microsoft deleted the researcher's bug report account, suspended their GitHub, and threatened criminal charges, all while three zero-days remain unpatched.
Windows Report

Microsoft Rushes to Mitigate Dangerous New “YellowKey” Windows Exploit

Microsoft rushes to mitigate the new “YellowKey” flaw that may bypass BitLocker protections and expose encrypted Windows ...

Microsoft Windows Alert—Angry Hacker Drops 2 New Zero-Day Exploits

The latest Microsoft Patch Tuesday rollout featured no zero-days. However, an angry hacker has just dropped two new 0-day exploits targeting Windows users.
Tech Times

Microsoft Defender Zero-Days Patched: RedSun, UnDefend Exploits Already Used in Live Intrusions

Microsoft pushed out-of-band patches on May 21, 2026, for two actively exploited Windows Defender zero-days — one that lets a ...

Microsoft Confirms Active 0-Day Exploit—Check Emergency Mitigation

Microsoft Exchange users are urged to mitigate a zero-day vulnerability that CISA has confirmed is under active exploitation.
SecurityWeek

Microsoft Rolls Out Mitigations for ‘YellowKey’ BitLocker Bypass

Microsoft has announced mitigations for CVE-2026-45585, a BitLocker bypass triggered via FsTx in Windows Recovery.
Dark Reading

2 Zero-Day Bugs in Microsoft's Nov. Update Under Active Exploit

Attackers are already actively exploiting two vulnerabilities for which Microsoft issued patches on Nov. 12 as part of its monthly security update. And they could soon begin targeting two other ...
PC World

Security expert publishes Windows exploit after Microsoft went silent

PCWorld reports on the ‘BlueHammer’ zero-day vulnerability that allows attackers to potentially take over Windows computers through privilege escalation. A frustrated security researcher published the ...