Microsoft threatened a security researcher with criminal prosecution. The cybersecurity community is furious.

Microsoft has come under fire for threatening security researcher Nightmare Eclipse with criminal prosecution after he disclosed unpatched vulnerabilities in Windows Defender and BitLocker. The company invoked its Digital Crimes Unit, which has raised significant concerns within the cybersecurity community.

This incident highlights the tension between tech companies and independent researchers, as Microsoft’s actions may deter future disclosures of vulnerabilities that could compromise user security.

The situation reflects ongoing debates about responsible disclosure practices and the balance between corporate security interests and the public's right to know about potential threats, especially as new exploits like 'YellowKey' emerge, undermining trust in established security measures.