Microsoft Kills Security Emails, Blames Canada
Summary: Microsoft told IT professionals it would suspend email notifications for security bulletins, summaries, advisories and revisions as of July 1, 2014, citing changing governmental policies on automated electronic messaging, and a spokesperson tied the move to Canada's Anti-Spam Law taking effect that date. Anti-spam experts including CAUCE's Neil Schwartzman said CASL contains an exception for messages that solely provide warranty, product recall or safety and security information, and Microsoft then said it would resume the notifications with its Advanced Notification Service on July 3, 2014.
Why it matters: Microsoft briefly cut the email channel that carried Patch Tuesday advance notices and emergency out-of-band alerts, and the experts who helped write CASL said the security carve-out already covered them - so a vendor's compliance read, not the law, decided whether defenders kept receiving vulnerability warnings.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026