Source: Motherboard
Summary
Security researcher Nightmare Eclipse has released a new zero-day exploit for Microsoft Office, despite Microsoft’s public threat to take legal action. The exploit was released on a Discord server and is reportedly a Windows-based remote code execution vulnerability. The researcher had previously announced plans to release more zero-day exploits after Microsoft refused to pay for them. The exploit is the latest in a series of releases by Nightmare Eclipse, who has been selling and publicly disclosing zero-day exploits in recent months.
Our Reading
The announcement sounds ambitious.
Nightmare Eclipse is at it again, releasing a new zero-day exploit for Microsoft Office, because why not? It’s not like Microsoft’s threats mean anything. The researcher is just trying to make a living by selling and disclosing zero-day exploits, and Microsoft is just mad they won’t play ball. The exploit is just another example of the cat-and-mouse game between security researchers and tech giants. And we’re all just along for the ride.
Author: Evan Null
