Microsoft will expand bug bounties - even on programs without official payouts
PositiveTechnology
- Microsoft has announced an expansion of its bug bounty program, which will now include coverage for any problematic code affecting its products and services under the 'In Scope by Default' initiative. This move aims to enhance security by encouraging the identification and reporting of vulnerabilities, even in programs that do not have official payouts.
- This development is significant for Microsoft as it reflects the company's commitment to improving its security posture and fostering a proactive approach to vulnerability management. By broadening the scope of its bug bounty program, Microsoft aims to leverage the expertise of the security community to identify potential threats before they can be exploited.
- The expansion of the bug bounty program comes at a time when Microsoft is also addressing critical security vulnerabilities, having recently issued patches for 56 security flaws. This highlights an ongoing challenge in the tech industry, where companies must continuously adapt to emerging threats while also striving to enhance user experience and reliability, as seen in Microsoft's efforts to eliminate notorious errors in its Windows operating system.
— via World Pulse Now AI Editorial System
