Microsoft says it will not pursue security researchers after zero-day backlash

2026-06-01T14:51:56Zc9a7be2fbf072ff677fc9a6679c16d58603ea180161626b245daf5de42937b82
AfghanistanCarnivalGitHubMicrosoftPakistan-linkedRussiaSideCopycredential-compromisecyberespionagedata-breachdiplomatsexfiltrationlegal-riskmaritime-universitiespersonal-dataproof-of-conceptvulnerability-disclosurezero-day

What happened

A batch of cybersecurity stories: Microsoft publicly pledged not to pursue security researchers amid backlash after multiple zero-day vulnerabilities and working proof‑of‑concept exploit code were published (via GitHub). Separately, researchers attribute a suspected Pakistan‑linked cyberespionage campaign (reported as SideCopy) targeting Afghanistan’s Ministry of Finance and provincial officials. An unidentified threat cluster has been conducting nearly two years of operations against Russian maritime universities and diplomats, with educational institutions heavily impacted. Cruise operator C

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
therecord_media
Record identifier
c9a7be2fbf072ff677fc9a6679c16d58603ea180161626b245daf5de42937b82
Enrichment time
2026-06-01T14:51:56Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · Microsoft says it will not pursue security researchers after zero-day backlash · Baitaphish