#Microsoft walks back its threat to pursue those who don't disclose responsibly as criminals. They don't apologize, but merely "clarify" their position in a post on X.com today. Since their statement doesn't seem to be on their blog, I am linking to x.com:
https://x.com/msftsecresponse/status/2061293718942908925
This is the type of threat to researchers that Zack Whittaker (npub1p5z…krfz) and I had been looking at in our survey on threats to journalists and researchers. It was impressive to see all of the experts like Kevin Beaumont (npub1lcc…lcye) speaking up to slam Microsoft for their blog post of May 27.
Confronted with overwhelming criticism by the security community, Microsoft stepped back.
#responsibledisclosure #Microsoft