Microsoft is ticking off a lot of researchers this week by claiming that those who dump proof-of-concept exploits for vulnerabilities they have not responsibly disclosed are enabling criminal activity, and that Microsoft will track them and bring cases against them.
Everything old is new again, I guess. Many companies have responsible disclosure processes and even bug bounties, directly because they got raked over the coals by security researchers in the early 2000’s and 2010’s. When someone can completely fuck your reputation by releasing direct proof of your failings, pissing them off is a pretty bad plan.
But, it would seem that all of the intelligence at Microsoft really is artificial these days.