Microsoft Security Response Center

We are the Microsoft Security Response Center. To report security vulnerabilities or abuse in Microsoft products, visit

[Microsoft Security Response Center @msftsecresponse]

Over the past several days, we have been listening to the conversation around coordinated disclosure and the relationship between security researchers and vendors. We recognize that this relationship is both critical and, at times, fragile. We deeply value the security community, and will continue to take your feedback seriously.

To be clear about our approach to legal matters, we have no intention to pursue action against individuals conducting or publishing their security research. When an individual breaks the law and engages in malicious activity causing real harm to our customers, we will work with law enforcement as appropriate.

We recognize the work that goes into researching and submitting a vulnerability. We are committed to approaching every interaction with transparency, clear communication, and professionalism. We continue to believe strongly in Coordinated Vulnerability Disclosure as the foundation for protecting customers and improving our products. Each year we process a high volume of vulnerability reports. That volume continues to grow and will continue with the rise of AI-enabled research. We acknowledge that some interactions have fallen short and are working to learn from them.

Many of us have experience on both sides of this work, as researchers reporting vulnerabilities and as responders triaging and assessing them. That perspective informs how we approach this feedback and the importance we place on getting it right, particularly as the volume and complexity of research continues to grow.

The security community plays a vital role in helping us protect customers. We are committed to maintaining a constructive and respectful relationship and growing together. We know that, given the nature of this work, there will at times be misunderstandings. We remain committed to engaging in good faith and to providing a respectful and professional experience for all researchers, regardless of past interactions.

[Microsoft Security Response Center @msftsecresponse]

@mishra_0x Congrats Mishra!

[Microsoft Security Response Center @msftsecresponse]

@p1nkjelly We look forward to celebrating with you in Vegas!

[Microsoft Security Response Center @msftsecresponse]

@rm_rf_chumy Thank you for partnering with us @rm_rf_chumy!

[Microsoft Security Response Center @msftsecresponse]

@SamCheN696no Congrats!

[Microsoft BlueHat @MSFTBlueHat]

BlueHat Asia is heading to Singapore on September 17–18!

👉Apply now for your chance to join us: https://t.co/KvSaPSfVeq

Applications close July 17.

#BlueHat

[Microsoft Security Response Center @msftsecresponse]

@AlfazHossain_ Congrats! 🎉

[Microsoft Security Response Center @msftsecresponse]

Less than one month to go ⏳

The BlueHat Asia Call for Papers closes June 15. Don't miss your chance to share your research!

Submit your talk today: https://t.co/2OkI1hYW2r

[Microsoft BlueHat @MSFTBlueHat]

📣The BlueHat Asia Call for Papers is now open! 📣

BlueHat brings together security researchers and defenders to exchange ideas, experiences, and best practices. We’re looking for talks on novel research that hasn’t been presented before, including vulnerability research, mitigations, emerging threats and techniques, and related areas across the security landscape.

📍Singapore | September 17–18, 2026
🗓️CFP deadline: June 15, 2026

Submit your paper now: https://t.co/BAtZHRg7co

[Microsoft Security Response Center @msftsecresponse]

@security_index Congrats!

[Microsoft Exchange @MSFTExchange]

Addressing Exchange Server May 2026 vulnerability CVE-2026-42897 | Microsoft Community Hub https://t.co/XnocIkjbNe

[Microsoft Security Response Center @msftsecresponse]

@i_am_vishh Nice work Vishal!

[Microsoft Security Response Center @msftsecresponse]

@devangsolankii Congrats Devang! Thanks for all your hard work.

[Microsoft Security Response Center @msftsecresponse]

Security updates for May 2026 are now available. Details are here: https://t.co/FoXlCCPY0d

This month’s release reflects a broader shift across the industry, with advances in automation, increased researcher participation, and the growing use of AI accelerating the discovery of vulnerabilities. As a result, security updates may continue to trend larger over time, while the process behind how Microsoft validates, prioritizes, and delivers fixes remains consistent.

As discovery speeds up, the fundamentals matter more than ever. Stay current on patches, reduce exposure, strengthen identity protections, and invest in detection and response.

Learn more in our blog post by Tom Gallagher, VP of Engineering, MSRC: https://t.co/BYH090091w

[Microsoft Security Response Center @msftsecresponse]

Update to the Windows Insider Preview bounty program: General Awards for Elevation of Privilege and Information Disclosure are now split by finishing privilege, with award ranges increasing to $1,000–$8,000.

This change is designed to better align rewards with the impact of reported vulnerabilities.

Learn more on the Windows Insider Preview bounty page: https://t.co/Vr0pvfcEOi

[Microsoft Security Response Center @msftsecresponse]

@priyanshu_itech We'll see you in Vegas!

[Microsoft BlueHat @MSFTBlueHat]

Day 2 at BlueHat 2026 wrapped with new learnings, fresh perspectives, and continued discussions across the security community.

From Mark Russinvoch’s keynote to deep technical sessions, the focus stayed clear: advancing security, together.

Take a look at some of the highlights from Day 2 ⬇️

#BlueHat

[Microsoft BlueHat @MSFTBlueHat]

Day 2 is underway at BlueHat. Here’s a look back at Day 1.

A strong start, with the security community coming together to connect, share insights, and tackle real-world challenges.

Watch the highlights ⬇️

#BlueHat

[Microsoft Security Response Center @msftsecresponse]

RT @MSFTBlueHat: Thank you to everyone who joined us for day 1 of BlueHat 2026!

We kicked things off with opening remarks from Tom Gallagh…

[Microsoft BlueHat @MSFTBlueHat]

Thank you to our BlueHat speakers who joined us for the welcome reception this evening.

We are looking forward to welcoming everyone tomorrow for the first day of BlueHat, along with the presentations and conversations that bring this community together.

#BlueHat