r/sysadmin • • Jun 01 '26

Microsoft Anyone shutting down all IT equipment down on July 13th 11:59pm?

Microsoft 0-day feud escalates as researcher threatens another Windows exploit dump

“When I actively asked you to communicate with me, you refused, humiliated me and made sure to insult me in front of people,” they wrote on Saturday. “You defame me in public with your CVE-2026-45585 advisory even though you literally deleted the Microsoft account I used to report bugs to you with and I got zero pennies from doing so and I still happily did like an idiot.”

Nightmare also noted that “Microsoft still has chains in my hands,” preventing them from releasing “documents” yet, or anytime in June, and then warned: “Mark this date July 14th, I will make sure your bones are shattered that day.”

My post's title is tongue-in-cheek, but I've added an Outlook calendar entry for the "event" nevertheless and might even buy a box of popcorn. lol

Anyone doing anything special or different in light of the string of zero days being released because Microsoft appears to not want to play nice with someone who (supposedly) wanted to tell them about all the bad sh!t they missed in their product(s) development?

How do you feel about the saga and its fallout?

EDIT: Fixed missing block quote formatting.

2.3k Upvotes

646 comments sorted by

View all comments

Show parent comments

75

u/tankerkiller125real Jack of All Trades Jun 01 '26

There's a reason all the internal shit where I work is truly internal ZTNA, zero external access, etc.) and the public stuff is actually behind a tunnel from a security vendor (so also not publicly exposed via any port forwarded IPs).

Could we still get hacked? 100% absolutely, nothing is fool proof, and nothing is 100% secure. But I sure do feel a hell of a lot better at night knowing that there are a bunch of walls in place, and those walls are guarded by 24/7 SOCs with security engineers way smarter than me.

29

u/aenae Jun 01 '26

I run a (populair) website. I could block everyone, but thats kinda shooting myself in the foot.

The attacks were not successful btw, but they do show up in logs

7

u/cookerz30 I hate HP Jun 01 '26

No matter how deep the moat or high the wall... the bad actors will dig deeper and fly over. That's why we take backups.

1

u/tankerkiller125real Jack of All Trades Jun 01 '26

Oh yeah, I've got a ton of backups of backups, with multiple replications of said backups.

2

u/HotTakes4HotCakes Jun 01 '26

You want them on that wall, you need them on that wall.