Very important info: https://www.theregister.com/security/2026/05/28/microsoft-0-...
In the linked Microsoft blog post, they say :
> The details of these vulnerabilities were not shared with Microsoft prior to release, and the disclosures put our customers at unnecessary risk.
So are they lying ? Why would Nightmare-Eclipse not report them if they are not ?
It's a very weird situation
Yeah, but the customer in this statement being entities that requested this backdoor. Not the people/companies who paid for the licences.
>Why would Nightmare-Eclipse not report them if they are not ?
Maybe they're a foreign intelligence cutout masquerading as a burned researcher.
> the disclosures put our customers at unnecessary risk.
That statement irks me. Responsible disclosure or not, It's Microsoft themselves that put their customers at risk, not the researcher.