Locked in heated rivalry with researcher, Microsoft fixes 0-day they disclosed
摘要
微软于周二修复了两枚由研究员Nightmare Eclipse披露的高危零日漏洞。该研究员近几个月披露了多个高危漏洞，并附有概念验证代码。其声称此举是因微软违反双方此前就漏洞问题达成的协议。
Microsoft on Tuesday released fixes for two high-severity zero-days that were disclosed by a researcher who has been locked in a testy beef with the software giant.
Nightmare Eclipse, the pseudonym the researcher goes by, released a handful of high-severity vulnerabilities in recent months, making them zero-days that had the potential to be exploited in the wild. The researcher has said the disclosures, which included proof-of-concept code, came after Microsoft reneged on an arrangement the two made regarding vulnerabilities they had discussed.
Disclosure drama
“But someone violated our agreement and left me homeless with nothing,” Nightmare Eclipse wrote in March. “They knew this will happen and they still stabbed me in the back anyways, this is their decision not mine.”
转载信息
评论 (2)
