Flutterby™! : Microsoft attacks security researcher

Microsoft under fire for threatening security researcher with criminal investigation

On Wednesday, Microsoft published a blog post criticizing the researcher, who goes by the handle “Nightmare Eclipse,” for publicly disclosing a series of bugs, including BlueHammer, RedSun UnDefend, and YellowKey. The flaws affected products such as the Windows built-in antivirus engine Defender, and the disk-encryption tool BitLocker. 

Different posts on Nightmare Eclipse's blog suggests that maybe the noted slopware vendor has been less than above board in dealing with exploit disclosure.