Another bug hunter leaks Microsoft exploits in defiance of company’s handling of vulnerability disclosures

A security researcher has publicly released exploit code for multiple Microsoft vulnerabilities, bypassing the company's coordinated disclosure process. The move follows a similar action by another researcher known as Nightmare Eclipse, who leaked exploits earlier this year in protest of Microsoft's handling of bug reports. The leaks expose users to increased risk by providing attackers with working exploit code before Microsoft can issue patches.

SPONSORED LINKS MOST POPULAR EVENTS - Overcoming the trade-offs in data sovereignty What does data sovereignty actually mean for your network, which trade-offs are unavoidable? Learn more. - From Prompt to Exploit: How LLMs Are Changing API Attacks Modern applications are API-driven, interconnected, and often over-permissioned, making them an ideal target for AI-assisted attacks. - Architecting the Future: Unlocking Enterprise Data Services for Kubernetes Join us to discover how to eliminate infrastructure silos and establish a standardized, enterprise-grade cloud-native platform. - Catch the Advanced Attacks Microsoft 365 Misses with Behavioral AI Security Microsoft 365 is the backbone of enterprise communication, and its native security filters out the known and the noisy. - Virtual Cyber Recovery Sim Step into the chaos of a live ransomware breach, test your response skills, and team up with other IT and security pros to outsmart cybercriminals - Virtual Cyber Recovery Simulation Ransomware attacks aren’t slowing down, and neither are we. Druva’s hit event, Escape Ransomware, is now fully virtual. - Agentic AI at Scale: From Pilot to Production Join us to learn how to unlock real ROI by driving adoption of AI at scale. AI https://beta.theregister.com/tag/ai - Security Another bug hunter leaks Microsoft exploits in defiance of company’s handling of vulnerability disclosures Researchers follow in Nightmare Eclipse’s footsteps, flipping off Redmond in favor of insta-leaks - OS platforms Microsoft Build: Surface RTX Spark Dev Box, Coreutils for Windows, air-gapped GitHub and more Execution Containers provide safe environment for running AI agents, while Windows Developer Config aims to make Windows less unpleasant for developers - public sector Listen up, England. The Health Secretary is going to be data controller for everyone's Single Patient Record No, public bucket policy doesn't mean everyone gets a bucket for themselves. Please let Tech do it. Don't go into Settings... NOOOOOO - Legal Citation, please UK regulator slaps Google with new publishing rules for search Action follows Chocolate Factory's changes to AI search results - Security UK banks offered access to OpenAI’s GPT-5.5 amid exclusion from Anthropic’s Glasswing expansion 150 new organizations inducted to cyber’s Soho House, including the first outside the US Infosec https://beta.theregister.com/security - Security Another bug hunter leaks Microsoft exploits in defiance of company’s handling of vulnerability disclosures Researchers follow in Nightmare Eclipse’s footsteps, flipping off Redmond in favor of insta-leaks - OS platforms Microsoft Build: Surface RTX Spark Dev Box, Coreutils for Windows, air-gapped GitHub and more Execution Containers provide safe environment for running AI agents, while Windows Developer Config aims to make Windows less unpleasant for developers - public sector Listen up, England. The Health Secretary is going to be data controller for everyone's Single Patient Record No, public bucket policy doesn't mean everyone gets a bucket for themselves. Please let Tech do it. Don't go into Settings... NOOOOOO - Legal Citation, please UK regulator slaps Google with new publishing rules for search Action follows Chocolate Factory's changes to AI search results - Security UK banks offered access to OpenAI’s GPT-5.5 amid exclusion from Anthropic’s Glasswing expansion 150 new organizations inducted to cyber’s Soho House, including the first outside the US FOSS https://beta.theregister.com/tag/FOSS - Another bug hunter leaks Microsoft exploits in defiance of company’s handling of vulnerability disclosures Researchers follow in Nightmare Eclipse’s footsteps, flipping off Redmond in favor of insta-leaks - Microsoft Build: Surface RTX Spark Dev Box, Coreutils for Windows, air-gapped GitHub and more Execution Containers provide safe environment for running AI agents, while Windows Developer Config aims to make Windows less unpleasant for developers - Listen up, England. The Health Secretary is going to be data controller for everyone's Single Patient Record No, public bucket policy doesn't mean everyone gets a bucket for themselves. Please let Tech do it. Don't go into Settings... NOOOOOO - Citation, please UK regulator slaps Google with new publishing rules for search Action follows Chocolate Factory's changes to AI search results - UK banks offered access to OpenAI’s GPT-5.5 amid exclusion from Anthropic’s Glasswing expansion 150 new organizations inducted to cyber’s Soho House, including the first outside the US - ZTE and partners nurture global ICT talent through 2026 engineering capacity building program Global ICT experts gather in Shenzhen to master cutting-edge engineering practices and foster international collaboration