Microsoft criticizes the disclosure of a zero-day vulnerability without prior sharing, sparking conflict with bug hunters

Microsoft condemned the public disclosure of alleged zero-day flaws in its products by a researcher using the names Chaotic Eclipse or Nightmare-Eclipse.

The company said the issues were not shared with it in advance and should have been reported through coordinated vulnerability disclosure.

Microsoft urged security researchers to use its reporting portal and said it will continue legal action and cooperation with law enforcement when necessary.