---
title: "Microsoft criticized for threatening a security researcher"
description: "A researcher known as Nightmare Eclipse published unpatched Defender and BitLocker bugs; Microsoft threatened a criminal investigation and the researcher's accounts were banned."
url: https://kurddevelopers.com/en/news/microsoft-threatens-security-researcher
language: en # English
type: news
published: 2026-05-29T17:03:00.000Z
updated: 2026-11-02T04:32:33.000Z
author: "Osamah Ismail"
author_url: https://kurddevelopers.com/en/author/1
section: "Security"
tags: ["Microsoft","Defender","BitLocker","Security Research","CVE"]
sources: ["TechCrunch","Microsoft MSRC Blog"]
image: https://kurddevelopers.com/uploads/2026/11/cropped-microsoft-logo-element-dbf6c1ad.png
translations:
  ku: https://kurddevelopers.com/news/microsoft-threatens-security-researcher
  ar: https://kurddevelopers.com/ar/news/microsoft-threatens-security-researcher
publisher: Kurd Developers
publisher_url: https://kurddevelopers.com/
---

# Microsoft criticized for threatening a security researcher

> A researcher known as Nightmare Eclipse published unpatched Defender and BitLocker bugs; Microsoft threatened a criminal investigation and the researcher's accounts were banned.

![Image: Microsoft](https://kurddevelopers.com/uploads/2026/11/cropped-microsoft-logo-element-dbf6c1ad.png)

## What happened
A researcher known as **Nightmare Eclipse** published **unpatched** bugs in **Windows Defender** and **BitLocker**:
- **BlueHammer** (CVE-2026-33825)
- **RedSun** (CVE-2026-41091)
- **UnDefend** (CVE-2026-45498)
- **YellowKey** (CVE-2026-45585)

## Microsoft's response
- A Microsoft blog post threatened a **criminal investigation**.
- The researcher's **GitHub** and **GitLab** accounts were banned.
- Per Microsoft and **CISA**, some flaws were used in real attacks.

## Why the backlash
Security experts warn that threatening researchers can discourage disclosure and leave bugs hidden.

## Tip
Keep Windows and Defender up to date.

**Sources:** TechCrunch, Microsoft MSRC Blog

---

Published by [Kurd Developers](https://kurddevelopers.com/) on 2026-05-29. Cite as: “Microsoft criticized for threatening a security researcher”, Kurd Developers, https://kurddevelopers.com/en/news/microsoft-threatens-security-researcher