ZDI Criticizes Microsoft for Mishandling Vulnerability Disclosures and 'Zombie IE'

ZDI has criticized Microsoft for mishandling coordinated vulnerability disclosures. The criticism highlights issues such as failure to credit researchers properly, misstating the category and severity of vulnerabilities, and general frustration in dealing with Microsoft. Dustin Childs from ZDI has raised questions about whether the increase in bugs has overwhelmed vendors, making it difficult to manage coordinated vulnerability disclosures effectively. ZDI's frustration is evident as they often face improper crediting and misspelled names despite providing valuable security flaw information to Microsoft for free. Additionally, the presence of 'Zombie IE' is noted as a concerning issue.