CIP Cyber

Microsoft Introduces New Bug Bounty Program

Table of Contents

Microsoft introduces a new bug bounty program on Wednesday; offering upto $500 to $15000 for valid submissions. The program begins from 20th Oct 2015 and ends on Jan 20th next year. Vulnerability program is for CoreCLR and ASP.NET 5 betas.

The company urged all hackers and security researchers to report vulnerabilities in its Core CLR and ASP.NET 5 betas, Its open source web application framework for OS X, Linux and Win. The reward will depend on how severe the vulnerability is reported by the researcher.

In a blog post  published today a senior director of Microsoft Security Response Center said; “This bounty is particularly interesting because the libraries and functions included in .NET enable developers to write their own programs with great security and stability, increasingly on many operating systems”.

The company has previously open short term bounty programs and receive huge response from security researchers. Last year Microsoft introduced where researchers are rewarded for reporting the vulnerabilities of Microsoft online services; eg: Office 365.

The criteria has been defined for the participants of this bounty program.

  •  The candidate who report any vulnerability should be 14 years old.
  •  The researcher should not be a part of any organization that permits him from participation. 
  • Researcher should not be the resident of US sanction countries; like North Korea,Iran. 
  • Participant should not be the employee of Microsoft or any of its subsidiary.

The reward of the submitted vulnerability will be decided by the Security Team; according to its quality and complexity. If the same bug was reported by more than one researcher then the bounty will be rewarded to the first submission.

CIP Cyber Staff

CIP Cyber Staff

CIP Cyber Staff comprises CIP cybersecurity experts committed to delivering comprehensive information on critical infrastructure protection. The content covers diverse topics, equipping professionals to defend organizations and communities in an ever-evolving cyber landscape.

Most popular

Industrial Cybersecurity

Want always be up to date?

Don't miss the latest news

By subscribing to our mailing list, you will be enrolled to receive our new trainings, latest blog posts, product news, and more.

CIP Training & Certifications

Transform your cybersecurity skills with CIP Cyber’s comprehensive training & course offerings

Related Articles

Want always be up to date?

Don't miss the latest news

By subscribing to our mailing list, you will be enrolled to receive our new trainings, latest blog posts, product news, and more.

CIP Training & Certifications

Transform your cybersecurity skills with CIP Cyber’s comprehensive training & course offerings