Microsoft under fire for threatening security researcher with criminal investigation

A public spat between Microsoft and an independent security researcher reopens a long-running debate over who is responsible ...

Microsoft bans security researcher after Windows 11 BitLocker zero-day exploit release

A researcher accuses Microsoft of banning their GitHub and Microsoft accounts after publishing a Windows 11 BitLocker ...

Microsoft faces backlash after suspending accounts linked to zero-day exploit disclosures: Report

Microsoft is reportedly facing criticism over its response to a security researcher who has been publicly sharing ...
TweakTown

Microsoft threatened a security researcher with criminal charges, and the cybersecurity community isn't having it

Microsoft deleted the researcher's bug report account, suspended their GitHub, and threatened criminal charges, all while three zero-days remain unpatched.
Windows Report

Microsoft Rushes to Mitigate Dangerous New “YellowKey” Windows Exploit

Microsoft rushes to mitigate the new “YellowKey” flaw that may bypass BitLocker protections and expose encrypted Windows ...

Microsoft Windows Alert—Angry Hacker Drops 2 New Zero-Day Exploits

The latest Microsoft Patch Tuesday rollout featured no zero-days. However, an angry hacker has just dropped two new 0-day exploits targeting Windows users.
SecurityWeek

Microsoft Rolls Out Mitigations for ‘YellowKey’ BitLocker Bypass

Microsoft has announced mitigations for CVE-2026-45585, a BitLocker bypass triggered via FsTx in Windows Recovery.
Tech Times

Microsoft Defender Zero-Days Patched: RedSun, UnDefend Exploits Already Used in Live Intrusions

Microsoft pushed out-of-band patches on May 21, 2026, for two actively exploited Windows Defender zero-days — one that lets a ...

Zero-day exploit completely defeats default Windows 11 BitLocker protections

A zero-day exploit circulating online allows people with physical access to a Windows 11 system to bypass default BitLocker ...

Microsoft Exchange hacked, Defender broken, BitLocker bypassed

Microsoft's May Patch Tuesday looked quiet. Since then, there's been an unpatched Exchange CVE, three Defender flaws, and a ...
Dark Reading

2 Zero-Day Bugs in Microsoft's Nov. Update Under Active Exploit

Attackers are already actively exploiting two vulnerabilities for which Microsoft issued patches on Nov. 12 as part of its monthly security update. And they could soon begin targeting two other ...
PC World

Security expert publishes Windows exploit after Microsoft went silent

PCWorld reports on the ‘BlueHammer’ zero-day vulnerability that allows attackers to potentially take over Windows computers through privilege escalation. A frustrated security researcher published the ...