Locked in heated rivalry with researcher, Microsoft fixes 0-day they disclosed

▤ Summary

Microsoft released fixes for two high-severity zero-days disclosed by a researcher known as Nightmare Eclipse. The vulnerabilities include a local privilege escalation flaw in Windows Collaborative Translation Framework and a separate issue that appears to be a regression of an older bug. Microsoft also provided mitigation guidance for another disclosed flaw that can weaken BitLocker encryption when an attacker has physical access to a device. The article highlights an ongoing dispute between the researcher and Microsoft over vulnerability disclosure practices.

▦ Linked Companies

Microsoft

$1B+