Microsoft recently credited a hacker known as EncryptHub for discovering and reporting two security vulnerabilities in Windows. While the hacker has a history of cybercriminal activity—including malware distribution and zero-day exploits—his recent cooperation with Microsoft through responsible disclosure has sparked debate. The case raises ethical questions about whether individuals with a criminal past can contribute positively to cybersecurity.