Microsoft Slams Zero-Day Public Disclosure as Researcher Promises More

Microsoft has publicly condemned the practice of releasing zero-day vulnerabilities with working proof-of-concept code, deeming it “never justifiable.” The tech giant’s stance comes as a security researcher has threatened to publish further exploits. The Record by Recorded Future reports that these vulnerabilities, once released on platforms like GitHub, become immediately accessible to both malicious actors and defenders alike, creating a volatile cybersecurity landscape.

This approach bypasses responsible disclosure channels, forcing defenders into a reactive posture. When exploit code is readily available, the window for patching and mitigation shrinks dramatically. CISOs must assume that any zero-day released in this manner is already being weaponized or will be within hours.