Mastodawn

No #microslop what #chaoticeclipse does is *exactly* what #responsibledisclosure is about:
If you find a vulnerability, you first report it to the vendor so they can fix the issue, and later you can take the credit.
But if that vendor fails to get their shit together or actively refuses to fix or even acknowledge it, then you *have to* make that public.

ScoTTY May 29

#microslop MSRC spent years artificially f-ing up the submission process just so people rather give up than reporting something that makes some manager's KPIs go down.

According to #chaoticeclipse they *have* tried to report a vulnerability to the MSRC, got rejected, got threatened, got their account deleted.

And now #microslop makes legal threats about vulnerability exploits being posted publicly.

https://www.heise.de/en/news/Too-many-zero-days-Microsoft-threatens-legal-action-11310736.html

Too many zero-days: Microsoft threatens legal action

Microsoft is struggling with published evidence of unpatched security vulnerabilities. The company is now threatening legal action.

heise online

Tarnkappe.info May 18

📬 MiniPlasma zeigt: Selbst gepatchtes Windows ist angreifbar
#ITSicherheit #ChaoticEclipse #CVE202017103 #Microsoft #MiniPlasma #Patchmanagement #PrivilegeEscalation #Sicherheitslücke #SYSTEMRechte #Windows11 #WindowsZeroDay https://sc.tarnkappe.info/9841ba

MiniPlasma zeigt: Selbst gepatchtes Windows ist angreifbar

MiniPlasma verschafft SYSTEM-Rechte auf gepatchten Windows-Systemen. Der neue Zero-Day wirft Fragen zu Microsofts Patchmanagement auf.

TARNKAPPE.INFO

Winbuzzer May 18

https://winbuzzer.com/2026/05/18/new-windows-miniplasma-zero-day-exploit-gives-syst-xcxwbn/

MiniPlasma is a newly released proof-of-concept exploit that reportedly turns a standard Windows user into SYSTEM on fully patched Windows 11 systems, reviving doubts about a flaw Microsoft marked fixed in 2020.

#Cybersecurity #MiniPlasma #Microsoft #Windows11 #CVE202017103 #ChaoticEclipse #MicrosoftWindows #Windows11

Daniel Marsh May 14

A critical Windows zero-day, YellowKey, has been publicly disclosed, demonstrating how physical attackers can bypass BitLocker encryption. This exploit leverages the Windows Recovery Environment (WinRE) and crafted NTFS transaction logs to gain full access to your supposedly protected drive. Experts recommend using a BitLocker PIN and BIOS password as mitigation, but the researcher hints at…

https://www.tpp.blog/1uwnfdm

#cybersecurity #chaoticeclipse #microsoft

🤖 This post was AI-generated.