Sci-tech

Windows Bounty Program Offers Up to $250K Per Bug

Windows Bounty Program Offers Up to $250K Per Bug”

The top money reward is for bugs discovered in Microsoft's Hyper-V virtualisation software, but more modest rewards start at $500 (£382) for critical or important remote code execution flaws found in Windows. And payouts from $500 to $250,000 is one heck of an incentive to go looking for bugs. The new programs will have a maximum payout of $250,000 for a Hyper-V exploit with Remote Code Execution, and a maximum of $200,000 for Windows 10 exploits that are "Novel & fundamental advancement [s] in exploitation technology that universally bypasses current mitigations".

The newly-launched bounty program is not tied to any specific program but aims to make sure Windows packages not covered by other bounty scheme are being monitored. Microsoft's new program not only covers Windows 10 but also Windows Insider Preview which is geared towards testing new preview builds of its operating system as well.

- All security bugs are important to us and we request you report all security bugs to secure@microsoft.com via Coordinated Vulnerability Disclosure (CVD) policy.

The other focus areas include "Mitigation Bypass" (things that break Microsoft's security sandboxing), "Windows Defender Application Guard", "Microsoft Edge" and "Windows Insider Preview". 'Security is always changing and we prioritise different types of vulnerabilities at different points in time. These programs have been around for some time but surprisingly, Microsoft did not offer a reward for reporting issues with Windows.

"These bounty programs help Microsoft harness the collective intelligence and capabilities of security researchers to help protect customers". Rewarding security researchers with bounties costs peanuts compared to paying for a serious security snafu.



Like this

Latest


27 July 2017
BJP hits back at Congress for criticising Prez Ram Nath Kovind's speech
Speaking to ANI, Congress leader Anand Sharma said it is disrespecting the history and the sacrifices made by Mahatma Gandhi. The Congress is seeking to impact upon the great stature of Nehru ji, by insisting that his name should be taken always.

27 July 2017
Conte: I would pick Kane if I had to sign a striker
A traditional centre forward, Kane has been the Premier League's top goal-scorer for the last two seasons. Otherwise you continue to stay in your level.

27 July 2017
McCain, battling cancer, returns to Senate for critical health care vote
The health industry has watched the debate nervously, and after the vote some groups urged the Senate to reconsider its approach. After a brief wave of acknowledgement, McCain swiftly cast a "yes" vote, followed seconds later by Johnson's aye.

27 July 2017
David Ramsden Named Bank of England's Deputy Governor
At the same time, Britain's central bank has appointed former HR chief Joanna Place as its new chief operating officer. Ramsden, a civil servant who is now the chief economic adviser to the Treasury, will take up his role immediately.

27 July 2017
Bellecapital International Ltd. Has $425000 Position in Gilead Sciences, Inc. (NASDAQ:GILD)
Alton sold 40,000 shares of the business's stock in a transaction on Friday, July 21st. ( GILD ) is its Earnings per Share or EPS. To measure price-variation, we found GILD's volatility during a week at 1.64% and during a month it has been found around 1.65%.

27 July 2017
Claims Climb in States by 10K
The Labor Department said Thursday that weekly unemployment applications rose by 10,000 to a seasonally-adjusted 244,000. The four-week moving average of initial claims, which evens out weekly volatility, remained flat last week at 244,000.

27 July 2017
Grey's Anatomy Spinoff Casts Rosewood's Jaina Lee Ortiz
The 30-year-old is the first to sign on to Shonda Rhimes' upcoming series, which will center on a team of Seattle firefighters. To recap, here's what we know so far.

27 July 2017
Free hepatitis testing at Seminole County health department
It is transmitted through contaminated blood transfusions, needles and in some patients the cause is unknown. It can be both acute and chronic, ranging in severity from a mild illness to a lifelong one.

27 July 2017
Marlins outscore Rangers 22-10, set franchise record for runs
The first four Marlins reached on two doubles and two singles before Darvish recorded his first out of the inning. Rangers: Before a weekend series at home against Baltimore, the Rangers have a day off Thursday.

27 July 2017
United Parcel Service, Inc. (UPS) Stake Held by Pettee Investors Inc
After $0.21 actual EPS reported by Shutterstock Inc for the previous quarter, Wall Street now forecasts 9.52% EPS growth. Blackrock Fund Advisors has 679 shares for 0% of their portfolio. 350 were accumulated by Kings Point Cap Management.



Recommended