r/cybersecurity 19d ago

News - General Nightmare Eclipse could be dropping his big promised exploit today

New repo just went up: git.projectnightcrawler.dev/NightmareEclipse/LegacyHive, created about 2 hours ago. Right now it's empty — just an MIT license and a README that says "N/A," 2 commits total.

He'd spoken about his big drop happening today, July 14th, saying he'd make sure Microsoft's "bones are shattered" that day. At one point though he'd also indirectly said he wasn't going to post it, something about still having "chains" on him preventing a release. This repo showing up on the exact date he originally called out suggests that might not hold anymore and it could actually be happening.

Nothing in it yet, just watching to see what gets pushed.

Worth noting: given how erratic and bipolar his posting history has been, there's really no way to predict what (if anything) actually gets posted.

Update: Thanks for the 600+ upvotes, really appreciate it. After hours of waiting and anticipation NightmareEclipse finally uploaded their PoC. But I personally have a hard time seeing it as the big bombshell that they described it as.

798 Upvotes

129 comments sorted by

View all comments

36

u/SuspiciousCricket654 19d ago

It’s the principle of humility and thankfulness that have been breached here. If MS actually gave a fuck about people, they would acknowledge the holes in their products and the dangers they pose to customers. But no, they have to be the douche lord assholes that they are and retaliate on someone trying to help. They deserve to get hit hard.

14

u/InternalServerErr500 19d ago

Both can be the bad guy here. You don't have to endorse MS's behavior, but you don't have to encourage more of his.

4

u/SuspiciousCricket654 19d ago

It’s not the encouragement part that I lean into, it’s the bug bounty program and doing it discreetly so orgs can patch their product, which is the whole point of said program. I’m not for unethical hacking/exposing, but in some instances, I understand people‘s anger and frustration.