CuraSec

Learn archived

GitHub bans researcher who posted unpatched Windows zero-days

2026-07-13 13:18 UTC · HN (security) · read the source ↗ #vulnerability-disclosure#windows#github
  • Engineer — Learn: No patch or PoC details are provided in this item, but the episode highlights the risks of coordinated vs. full disclosure and how platform policy can affect access to exploit research; no immediate action required on running systems.
  • SOC/IR — Skip
  • Leader — Learn: This dispute surfaces tension between Microsoft’s disclosure policy and independent researchers, relevant context for vendor risk assessments and your own organization’s vulnerability disclosure policy posture.
This entry was curated and judged by AI (Claude) with automated enrichment (CISA KEV / EPSS / public PoC). Verify against the original source before acting. Found a bad verdict? Report it — confirmed errors go to the corrections log.