Microsoft is threatening legal action for disclosing exploits

Microsoft faced backlash after threatening legal action over publicly posted zero-day proof-of-concept exploit code.

The company also suspended the poster’s access on GitHub, GitLab, and MSRC, citing improper vulnerability disclosure.

Cybersecurity researcher Kevin Beaumont said Microsoft’s stance is inconsistent with its own history of hiring and buying exploit talent.

The case underscores the tensions between responsible disclosure, vendor-controlled reporting channels, and public exploit research.