Microsoft Suspends Developer Accounts of WireGuard and VeraCrypt Developers Without Warning
Microsoft recently suspended the Microsoft developer accounts used for years by the developers of the well-known open-source projects WireGuard and VeraCrypt without providing a clear explanation, causing updates for these two security tools to stall on the Windows platform.
According to a post on a forum by VeraCrypt developer Mounir Idrassi, Microsoft suddenly terminated his long-term developer account used to sign bootloaders and drivers, without any prior warning emails or notifications. After the suspension, he attempted to communicate with Microsoft but only received responses from bots and automated replies, remaining unaware of the reason for the account suspension.
Mounir stated that while he can still release VeraCrypt updates on other platforms, the majority of users are on Windows. The account suspension means he cannot release new versions of VeraCrypt for Windows, and the project will have to suspend feature updates, bug fixes, and security patches on that platform. Worse still, this suspension not only affects the VeraCrypt project itself but also has a real impact on his daily work.
A similar situation has occurred with the developers of WireGuard, an open-source VPN communication protocol. Its developers posted in the community that they also discovered their Microsoft developer accounts had been suspended without warning: they only found out the accounts had been suspended when they tried to log in to release an update one day. They are currently in a 60-day appeal process, but the outcome is uncertain. They worry that if WireGuard encounters a serious security vulnerability, such as a remotely exploitable code execution flaw, Microsoft's actions will completely tie their hands, preventing them from pushing out critical security updates to users in a timely manner.
As of now, the outside world has not yet received any specific reason or more detailed explanation for the suspension of these accounts. Until Microsoft provides clarification and restores the relevant developer accounts, updates for VeraCrypt and WireGuard will remain stalled within the Windows ecosystem, and users will be unable to receive new features and security fixes in the short term.