“They will ruin my life”: Microsoft threatens to wield ‘Digital Crimes Unit’ over exploit disclosures — causing uproar in the cybersecurity community (UPDATE)

“They will ruin my life”: Microsoft threatens to wield ‘Digital Crimes Unit’ over exploit disclosures — causing uproar in the cybersecurity community (UPDATE)

“They will ruin my life”: Microsoft threatens to wield ‘Digital Crimes Unit’ over exploit disclosures — causing uproar in the cybersecurity community (UPDATE)

https://www.windowscentral.com/microsoft/they-will-ruin-my-life-microsoft-threatens-to-wield-digital-crimes-unit-over-zero-day-exploit-disclosures-causing-uproar-in-the-cybersec-community

Publish Date: 2026-05-31 03:01:00

Source Domain: www.windowscentral.com

Having known a fair few cybersecurity researchers in my time, I know that Microsoft is something of a controversial figure.

Being the largest operating system in the world, Windows is often the target of hacks and exploits, alongside Microsoft’s cloud Azure. Russian-backed hackers breached Microsoft’s 365 layer last year, for example, compromising U.S. government official accounts.

To combat this, Microsoft is known to work with prolific and not-so-prolific security researchers, sometimes called whitehat hackers, who test Microsoft’s security layers and then report the issues. Microsoft has a bug bounty program to that end, where ethical hackers can report exploits for a major pay day. At least, in theory.

I know from my experience working with Xbox and Windows sources that actually getting paid is often more difficult than Microsoft’s documentation suggests. I know more than a couple of researchers who weren’t compensated fairly in the past, and to speculate, this latest drama revolves around one such potentially burned user.

Security researcher Nightmare Eclipse went on a spree recently, publicly disclosing six major security vulnerabilities in Windows and other Microsoft systems. Typically, these types of bugs would be reported directly to Microsoft so that the firm could patch them up, but prior blog posts from Eclipse suggest he may have disclosed these publicly for retaliatory reasons.

Microsoft’s infrastructure is increasingly under attack from hackers both at a domestic and nation-state level. Iran also recently signalled intent to target Microsoft data centers in its recent conflict with the United States government. (Image credit: Microsoft)

“Normally, I would go through the process of begging them to fix a bug,” Eclipse wrote (via PCMag), “but to summarize, I was told personally by them that they will ruin my life and they did and I’m not sure if I was the only who had this horride [sic] experience or few people did but I think most would just eat it…

Source