Microsoft Has Forgotten Its Vulnerability Disclosure History
About this episode
The episode discusses Microsoft's recent actions regarding vulnerability disclosure and the implications for security researchers.
The recent Nightmare-Eclipse zero day drop and attendant drama has stirred up all kinds of trouble and unfortunately spurred Microsoft to publish a post scolding security researchers for not using the "proper channels" to disclose bugs, threatening legal action, and generally dredging up every hobby horse from the threadbare disclosure debate. Links MSRC post: https://www.microsoft.com/en-us/msrc/blog/2026/05/a-shared-responsibility-protecting-customers-through-coordinated-vulnerability-disclosure Decipher story: https://decipher.sc/2026/05/28/the-past-is-always-present-in-vulnerability-disclosure/ Expel event: https://info.expel.com/event-mythos-unhappy-hour.html
More episodes of Decipher Security Podcast
- Shai Hulud Returns, How Attackers are Using AI, and More Weird MSRC Behavior
- Lessons in Resilience, Perseverance, and Leadership With Matt Eversmann
- Chain Chain Chain of Compromises
- What the Data Tells Us About Claude Mythos and Bug Exploitability | Jay Jacobs and Michael Roytman
- Solving Hard Security Problems With an Outsider's Perspective | Sravish Sridhar
- AI Has a Security Measurement Problem | Gary McGraw
Explore listener stats, chart rankings, contacts and more on the Decipher Security Podcast podcast page.