Created by
A pot of $250K is now available to ransomware researchers, but it feeds a commercial product
Security bods can earn up to $10K per report
Research22 Apr 2025 | 3
Oracle Health reportedly warns of info leak from legacy server
Infosec in brief PLUS: OpenAI bumps bug bounties bigtime; INTERPOL arrests 300 alleged cyber-scammers; And more!
Security30 Mar 2025 | 3
Microsoft expands Copilot bug bounty targets, adds payouts for even moderate messes
Said bugs 'can have significant implications' – glad to hear that from Redmond
AI + ML20 Feb 2025 | 7
Samsung boosts bug bounty to a cool million for cracks of the Knox Vault subsystem
Good luck, crackers: It's an isolated processor and storage enclave, and top dollar only comes from a remote attack
Security08 Aug 2024 | 5
Microsoft's bug bounty turns 10. Are these kinds of rewards making code more secure?
Interview Katie Moussouris, who pioneered Redmond's program, says folks are focusing on the wrong thing
CSO22 Nov 2023 | 9
Bug bounty hunters load up to stalk AI and fancy bagging big bucks
Google offers AI-specific rewards, HackerOne sees more specializations
Cybersecurity Month27 Oct 2023 | 1
BROADER TOPICS
Toyota admits to yet another cloud leak
infosec in brief Also, hackers publish RaidForum user data, Google's $180k Chrome bug bounty, and this week's vulnerabilities
Security05 Jun 2023 | 6
Google boosts bounties for open source flaws found via fuzzing
Max reward per project integration is now $30k
Security01 Feb 2023 | 3
GitHub sets up private vulnerability reports for public repos to avoid 'naming and shaming'
No need for ignominy when a flaw is found
Security14 Nov 2022 | 5
Pentagon is far too tight with its security bug bounties
But overpriced, useless fighter jets? That's something we can get behind
Research29 Sep 2022 | 16
Find a security hole in Google's open source and you could bag a $31,337 reward
Will it be enough to prevent the next software supply-chain attack?
Research30 Aug 2022 | 5
Microsoft trumps Google for 2021-22 bug bounty payouts
Another $13.7m handed out to researchers, but then again it does have an awful lot of attack surfaces
Security12 Aug 2022 | 4
Student crashes Cloudflare beta party, redirects email, bags a bug bounty
Simple to exploit, enough to pocket $3,000
Research04 Aug 2022 | 8
LockBit ransomware gang claims it ransacked Italy’s tax agency
Miscreants boast of 78GB haul, officials say everything's fine
Security26 Jul 2022 | 7
Pentagon: We'll pay you if you can find a way to hack us
DoD puts money behind bug bounty program after reward-free pilot
Research05 Jul 2022 | 18
There are 24.6 billion pairs of credentials for sale on dark web
In brief Plus: Citrix ASM has some really bad bugs, and more
Security20 Jun 2022 | 3
Homeland Security bug bounty program uncovers 122 holes in its systems
Thinking of another word for this US govt department's name
CSO25 Apr 2022 | 4
Microsoft ups bug bounties 30% for cloud lines, pays more for 'scenario-based' exploits
In Brief Plus: HP fixes critical Teradici flaws, Karakurt may be a Conti side hustle, and info-stealing malware set free
Security18 Apr 2022 |
Crypto outfit Qubit appeals to the honour of thieves who lifted $80M of its digi-dollars
Offers $2 million bug bounty and hopes perps see that record payout, and a clean conscience, as reasons to sacrifice $78m
Security31 Jan 2022 | 44
Biting the hand that feeds IT
