Microsoft is threatening legal action against a researcher or alleged former employee known as Nightmare Eclipse for publicly disclosing zero-day exploits without following standard responsible disclosure procedures, drawing criticism from cybersecurity experts.

The Verge

Microsoft is facing criticism for its handling of zero-day exploits. Someone going by the name Nightmare Eclipse has been publicly feuding with the company, posting proof-of-concept exploit code. Some of their posts suggest that they're a disgruntled former employee. But what caught cyber security researcher Kevin Beaumont's eye was how Microsoft has responded.
Microsoft suggests it plans to bring a criminal case against Nightmare Eclipse for failing to follow "proper coordination" in disclosing