Microsoft's recent response to a security researcher who published zero-day exploits has sparked a backlash, as the company appeared to threaten legal action against the researcher. The incident highlights the cat-and-mouse game between vendors and researchers, with the latter often pushing for faster patching and the former seeking to protect their intellectual property. The researcher in question had published several zero-day exploits in recent weeks, prompting Microsoft to seemingly indicate that criminal charges were a possibility1. This move has been met with criticism from the security community, which argues that such threats can stifle responsible disclosure and hinder the discovery of vulnerabilities. The incident underscores the need for organizations to assess their exposure to zero-day attacks, particularly those targeting Microsoft products, as the window for patching is rapidly closing. This matters to security practitioners because it underscores the importance of proactive vulnerability management to mitigate potential attacks.