this post was submitted on 12 Jun 2026
80 points (82.8% liked)
Memes
16576 readers
1406 users here now
Post memes here.
A meme is an idea, behavior, or style that spreads by means of imitation from person to person within a culture and often carries symbolic meaning representing a particular phenomenon or theme.
An Internet meme or meme, is a cultural item that is spread via the Internet, often through social media platforms. The name is by the concept of memes proposed by Richard Dawkins in 1972. Internet memes can take various forms, such as images, videos, GIFs, and various other viral sensations.
- Wait at least 2 months before reposting
- No explicitly political content (about political figures, political events, elections and so on), !politicalmemes@lemmy.ca can be better place for that
- Use NSFW marking accordingly
Laittakaa meemejä tänne.
- Odota ainakin 2 kuukautta ennen meemin postaamista uudelleen
- Ei selkeän poliittista sisältöä (poliitikoista, poliittisista tapahtumista, vaaleista jne) parempi paikka esim. !politicalmemes@lemmy.ca
- Merkitse K18-sisältö tarpeen mukaan
founded 4 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Explanaiton: Microsoft (MSFT) has a bug bounty program. Meaning researchers that find security vulnerability in Microsoft products can send them to the Microsoft security team and get a money reward. However they use AI to look through the submissions and also get slammed by submissions from AI meaning many of the legitimate vulnerability researchers are very frustrated. Submissions get rejected because they are "not a vulnerability" but one month later Microsoft publishes a patch against the vulnerability without acknowledging the researcher.
NightmareEclipse is a ... person ... who is frustrated by this. And they have A LOT of really really bad vulnerabilities. Because Microsoft did not want to pay them they just release the previously unknown vulnerabilities to the public. No patches exist. The hackers and Microsoft learn about the vulnerability at the same time.
So far they have released ~10 vulnerabilities in one month and claim they have many more with some big drops apparently coming in July.
Because of this, of course Microsoft is getting a lot of shit from big corporations that are afraid they will get hit with some nasty cyber attacks because of Microsoft's fuckup.
The much-feared July drops aren't happening, or at least aren't happening in July. Apparently whoever Eclipse is hasn't been getting much sleep.
Quotes taken from https://deadeclipse666.blogspot.com/ which as far as I can tell is their actual blog.
I feel like they are also doing some misdirection and spread false information. I am sure they are wanted by the FBI and NSA by now so not being predictable is safer.
That's very interesting. They haven't dropped any RCEs and it very much sounds like they either have something ready or know exactly where to look so I'm still on the edge of my seat. This defiantly doesn't seem over.
How much do you want to bet he found government backdoors
While I don't have much evidence, I suspect they are being pressured into leaving it open
The yellowkey vulnerability might be a backdoor. NightmareEclipse even speculated so in their publication.
XML looks like one too 😂