“`html
CNBC AI News – Redmond is upping the ante in the cybersecurity game. Microsoft announced an expansion to its .NET bug bounty program, significantly boosting reward payouts in a bid to attract more white-hat hackers to unearth vulnerabilities.
According to the latest announcement, the top payout for critical vulnerabilities in .NET and ASP.NET Core has surged to a cool $40,000. That’s real money to security researchers willing to put in the work.
“We’re excited to announce updates to the Microsoft .NET Bug Bounty Program,” said Madeline Eckert, Senior Program Manager for Microsoft Security Response Center. “These changes broaden the scope, simplify the rewards structure, and provide richer incentives for security researchers.” The move underscores Microsoft’s commitment to proactive security, recognizing that external talent can be a powerful asset in identifying potential weak spots before they’re exploited by malicious actors.
The program now encompasses a wider range of technologies, including all supported versions of .NET and ASP.NET, related technologies like F#, supported versions of ASP.NET Core for .NET Framework, templates provided by .NET and ASP.NET Core, and GitHub Actions within the .NET and ASP.NET Core repositories. This broader scope offers researchers more opportunities to find – and profit from – their discoveries.
Specifically, Microsoft is offering the $40,000 reward for critical Remote Code Execution (RCE) and Elevation of Privilege (EoP) vulnerabilities impacting .NET and ASP.NET Core. Critical Security Feature Bypass vulnerabilities are worth $30,000, while critical Remote Denial of Service (DoS) flaws will fetch $20,000. The tiered reward structure reflects the severity of the potential impact, incentivizing researchers to focus on the most damaging vulnerabilities.
This isn’t the first bounty boost from Microsoft this year. Earlier, the company ratcheted up rewards for AI vulnerabilities within its Power Platform and Dynamics 365 services and products to $30,000. In February, they also announced a raise for medium-severity security vulnerabilities in Copilot, along with a 100% bonus multiplier across all Copilot vulnerability bounties, signaling a serious commitment to AI security.
“`
Original article, Author: Tobias. If you wish to reprint this article, please indicate the source:https://aicnbc.com/6165.html
