Microsoft 0-day feud escalates as researcher threatens another exploit dump

A disgruntled security researcher known as Nightmare Eclipse has released six Windows zero-day vulnerabilities and threatened to dump more on July 14, claiming Microsoft humiliated them and deleted their bug-reporting account. Microsoft responded with a blog post opposing the uncoordinated disclosure and hinted at legal action through its Digital Crimes Unit, while three of the six released exploits are already being actively weaponized by attackers. The researcher has reportedly caused significant enterprise-level damage in just six weeks, with the gap between vulnerability disclosure and exploitation now measured in hours rather than days.