Christopher | 🇺🇦 

Cyber Ops Manager 💻 | Public Sector | #CISSP | #CCSP | #SecurityX | #Pentest+ | #CySA+ | #CyberSecurity | #Infosec | #Hacking

[Microsoft Security Response Center @msftsecresponse]

Over the past several days, we have been listening to the conversation around coordinated disclosure and the relationship between security researchers and vendors. We recognize that this relationship is both critical and, at times, fragile. We deeply value the security community, and will continue to take your feedback seriously.

To be clear about our approach to legal matters, we have no intention to pursue action against individuals conducting or publishing their security research. When an individual breaks the law and engages in malicious activity causing real harm to our customers, we will work with law enforcement as appropriate.

We recognize the work that goes into researching and submitting a vulnerability. We are committed to approaching every interaction with transparency, clear communication, and professionalism. We continue to believe strongly in Coordinated Vulnerability Disclosure as the foundation for protecting customers and improving our products. Each year we process a high volume of vulnerability reports. That volume continues to grow and will continue with the rise of AI-enabled research. We acknowledge that some interactions have fallen short and are working to learn from them.

Many of us have experience on both sides of this work, as researchers reporting vulnerabilities and as responders triaging and assessing them. That perspective informs how we approach this feedback and the importance we place on getting it right, particularly as the volume and complexity of research continues to grow.

The security community plays a vital role in helping us protect customers. We are committed to maintaining a constructive and respectful relationship and growing together. We know that, given the nature of this work, there will at times be misunderstandings. We remain committed to engaging in good faith and to providing a respectful and professional experience for all researchers, regardless of past interactions.

[Christopher | 🇺🇦  @d4rkshell]

Nice plants you have there! #ShodanSafari

[Christopher | 🇺🇦  @d4rkshell]

@cybersecmeg Congratulations! 🎉🍾

[Christopher | 🇺🇦  @d4rkshell]

@cybergeekgirl @DanRaywood @RealZenno @FrankSEC42 @DirkSchrader_ @SeanWrightSec @cybersecstu @AnguaSec @PhillipWylie @brianwhelton @zbraiterman @robmay70 @Maekshyft @JakeMooreUK @Funsox @Dark3zt_h0ur @CtgIntelligence @BsidesRVK @corewarrior @SymoneBeez @infosec_fox Thank you, Lisa. Happy Weekend everyone!!

[Christopher | 🇺🇦  @d4rkshell]

Enjoyed a cold one this afternoon as the UK heatwave continues 🍻☀️

[Christopher | 🇺🇦  @d4rkshell]

Microsoft response to the public disclosures: https://t.co/3tRFJtoCWb

[Christopher | 🇺🇦  @d4rkshell]

Microsoft has banned Nightmare Eclipse from GitHub: https://t.co/EmeiJnJ0Ps

This is the researcher who disclosed several zero-days after Microsoft also deleted their MSRC account.

They have now moved on to GitLab: https://t.co/Npj0gplSum

(h/t to: @[email protected])

[Christopher | 🇺🇦  @d4rkshell]

Update: account is now showing as blocked on GitLab 😢

[Christopher | 🇺🇦  @d4rkshell]

@HackingDave get out of town!

[Christopher | 🇺🇦  @d4rkshell]

@cybergeekgirl @DanRaywood @RealZenno @FrankSEC42 @DirkSchrader_ @SeanWrightSec @cybersecstu @AnguaSec @PhillipWylie @brianwhelton @zbraiterman @robmay70 @Maekshyft @JakeMooreUK @Funsox @Dark3zt_h0ur @CtgIntelligence @BsidesRVK @corewarrior @SymoneBeez @infosec_fox Always appreciated. Thanks, Lisa. Hope everyone is staying cool in the sunshine! 🫠☀️

[Dark Web Informer @DarkWebInformer]

YellowKey PoC Demo to Bypass Bitlocker

GitHub: https://t.co/MFM7PQ8JX0

[Christopher | 🇺🇦  @d4rkshell]

@cybergeekgirl @DanRaywood @RealZenno @FrankSEC42 @DirkSchrader_ @SeanWrightSec @cybersecstu @AnguaSec @PhillipWylie @brianwhelton @zbraiterman @robmay70 @Maekshyft @JakeMooreUK @Funsox @Dark3zt_h0ur @CtgIntelligence @BsidesRVK @corewarrior @SymoneBeez @infosec_fox Thank you, Lisa. Have an awesome weekend, everyone!!

[Christopher | 🇺🇦  @d4rkshell]

@cybergeekgirl @DanRaywood @RealZenno @FrankSEC42 @DirkSchrader_ @SeanWrightSec @cybersecstu @AnguaSec @PhillipWylie @brianwhelton @zbraiterman @robmay70 @Maekshyft @JakeMooreUK @Funsox @Dark3zt_h0ur @CtgIntelligence @BsidesRVK @corewarrior @SymoneBeez @infosec_fox Fantastic! I will be sure to say hello 👋🏻 have a great weekend one and all! X

[Christopher | 🇺🇦  @d4rkshell]

@cybergeekgirl @DanRaywood @RealZenno @FrankSEC42 @DirkSchrader_ @SeanWrightSec @cybersecstu @AnguaSec @PhillipWylie @brianwhelton @zbraiterman @robmay70 @Maekshyft @JakeMooreUK @Funsox @Dark3zt_h0ur @CtgIntelligence @BsidesRVK @corewarrior @SymoneBeez @infosec_fox Enjoy the Bank Holiday Weekend, everyone! 🥳 🎉

[Christopher | 🇺🇦  @d4rkshell]

@2600 A busy one tonight in Manchester, UK! Great to see our NYC2600 friends in attendance too.

[Nightmare Eclipse @ChaoticEclipse0]

In response to CVE-2026-33825 (BlueHammer patch),
The RedSun, a new unpatched windows defender EoP vulnerability has been publicly disclosed and can be found here -
https://t.co/4nRcWSbuBv

[Christopher | 🇺🇦  @d4rkshell]

@cybergeekgirl @DanRaywood @RealZenno @happygeek @FrankSEC42 @DirkSchrader_ @SeanWrightSec @cybersecstu @AnguaSec @PhillipWylie @brianwhelton @zbraiterman @robmay70 @Maekshyft @JakeMooreUK @Funsox @Dark3zt_h0ur @CtgIntelligence @BsidesRVK @LadyCyberRosie @corewarrior Thanks, Lisa. Have the best weekend, everyone!!

[Anastasis Vasileiadis @Anastasis_King]

🔥 BlueHammer — Windows Defender 0-Day Privilege Escalation PoC
⚔️ Unpatched Windows Zero-Day Exploit (SYSTEM Access)

📌 GitHub Repository
👉 https://t.co/yAI2wvV8mB

[Christopher | 🇺🇦  @d4rkshell]

@guyrleech @Zoom The call is coming from inside the house!