This NYT article is paywalled but Symantec's blog post [0] (on which much of the NYT article is based) is not. --- According to the blog post, "Buckeye", a gr

This NYT article is paywalled but Symantec's blog post [0] (on which much of the NYT article is based) is not. --- According to the blog post, "Buckeye", a group allegedly working on behalf of the Chinese state, also used an "exploit of a previously unknown Windows zero-day vulnerability. This zero day was reported by Symantec to Microsoft in September 2018 and patched in March 2019." So Symantec reported a zero-day -- which was being actively exploited in the wild by a state-based actor -- to Microsoft and Microsoft STILL didn't release a patch for it until six months later? [0]: https://www.symantec.com/blogs/threat-intelligence/buckeye-windows-zero-day-exploit https://www.symantec.com/blogs/threat-intelligence/buckeye-w...