Microsoft and security researcher Nightmare Eclipse are in a public fight over how security flaws should be handled. Over recent weeks, Nightmare Eclipse posted working exploit code online for several serious Windows bugs before Microsoft released fixes. The flaws affect major Windows security features like Microsoft Defender and BitLocker. The researcher says they first reported the problems privately but claims Microsoft ignored the reports, delayed responses, and shut down their bug reporting account. They then published the details and proof-of-concept code publicly. On May 27, Microsoft responded in a blog post, saying that releasing exploit code before patches are ready puts users at risk because attackers can immediately use it. Microsoft also warned it would continue legal action against those enabling cybercrime like Eclipse Nightmare Eclipse argues they went public because of slow fixes and poor treatment from Microsoft in the past.

The hacker group Chaotic Eclipse, also known as Nightmare-Eclipse, has released two new Windows exploits called YellowKey and GreenPlasma. >YellowKey bypasses BitLocker encryption on Windows 11 and newer server versions by copying a special folder to a USB drive or the EFI partition and then rebooting while holding certain keys to gain full access to the locked drive. >GreenPlasma lets users gain higher system access through a CTFMON method that affects Windows 11 and some servers, with only part of the code shared as a challenge for others. In a signed blog post, the group warned Microsoft directly that the next Patch Tuesday will have a big surprise for them. They said they have never failed to deliver on a promise, noted their unhappiness with how Microsoft handled their past reports, and chose not to target Defender this time.

Good Monday aka Web3Privacy Newsletter day! Thank you to everyone who came to our Prague, Rome or Cluj meetups - eternal love. And while it truly is nice to meet each other and discuss privacy in real world, the news still keep coming. So here is your round-up of what happend everywhere. Lot of people are now noticing how it isn't advisable to have everything tied to one Google email. So in name of de-googling ourselves, let's take a look at @KagiHQ , our tool of this week. Other news featuring @signalapp testing automatic key verification via @CyberInsidercom, success of @Zcash, or hackers taking a look into possible BitLocker backdoor. Case study on not signing in with Google by @the_smart_ape and what to do instead from @Cybernews and much more. Check the full newsletter at Curated by @xgotchmax

Microsoft has released Windows 10 update KB5087544 as the extended security update for May 2026. It fixes 120 security problems and a Remote Desktop warning issue on different monitors while adding new Secure Boot reporting This brings systems to build 19045.7291. You can install it through Windows Update or manually, but some TPM setups may ask for a BitLocker recovery key and Microsoft has a workaround.

What are the blockers for AI implementation? Chief AI Officer at @UBS Daniele Magazzeni says it is “the ability to trust the model.” “Therefore, being able to assess the reliability and accuracy of the model is very important.” Supported by UBS

This crazy bitch pushes puberty blockers onto kids as young as 7 years old! Claiming that kids of this age can make life changing decisions like “putting a cast on a broken arm.” I’m convinced that there are people out there purposely trying to damage the next generation.