"Microsoft stated it has no intention to pursue legal action against individuals conducting or publishing security research. The statement follows criticism regarding the company's previous rhetoric toward a researcher who disclosed Windows zero-days. The company maintains that vulnerabilities should be reported privately to allow for fixes."