Microsoft has backpedaled on its stance towards a security researcher who publicly disclosed zero-day vulnerabilities in Windows, stating it has no intention of pursuing legal action against individuals conducting security research1. This reversal comes after the company initially condemned the researcher's actions and invoked its Digital Crimes Unit, sparking a public feud. The researcher had been releasing zero-day exploits for Windows, putting pressure on Microsoft to issue patches quickly. The company's updated statement aims to calm the security community, which had criticized Microsoft's initial response as overly aggressive. The incident highlights the tense relationship between vendors and researchers, particularly when it comes to zero-day disclosures. As zero-day activity continues to target Microsoft products, practitioners must assess their exposure immediately to mitigate potential risks.