TechCrunch

Enterprise, Security & Privacy

Microsoft Threatens Legal Action Against Researcher Who Published Unpatched Security Flaws

Microsoft plans criminal referrals and legal action against “Nightmare Eclipse” after public disclosure of three unpatched bugs—BlueHammer, RedSun UnDefend, and YellowKey—affecting Windows Defender and BitLocker. A May 29, 2026 blog post says the researcher bypassed coordinated disclosure, even as Microsoft and CISA say the bugs are already being exploited.

Scroll to Top