> The details can be used to create signatures for anti-malware software and IDSes by 3rd parties who are nimbler than Microsoft. No, you don't need to publish

> The details can be used to create signatures for anti-malware software and IDSes by 3rd parties who are nimbler than Microsoft. No, you don't need to publish the details of the vulnerability to the public in order to cooperate among the anti-virus vendors. > some organisations do full-take packet capture archiving and might be interested to know if they were hacked via this flaw Observing full packets has nothing to do with giving to the public the details of which system API flaw was used for the attack.