14 DAY TRIAL // Microsoft has recently announced so-called scenario-based bounty awards for a series of programs, as the company is expanding its bounty program to focus on vulnerabilities with the highest potential impact on customer security.
In other words, Microsoft is willing to pay more for a high-severity vulnerability, and the company says the announcement concerns Dynamics 365 and Power Platform Bounty Program as well as the M365 Bounty Program.
“We are excited to announce the addition of scenario-based bounty awards to the Dynamics 365 and Power Platform Bounty Program and M365 Bounty Program. Through these new scenario-based bounty awards, we encourage researchers to focus their research on vulnerabilities that have the highest potential impact on customer privacy and security. Awards increase by up to 30% ($26,000 USD total) for eligible scenario submissions,” Microsoft says.
Rewards up to $26,000, bonus included
When it comes to Dynamics 365, a cross-tenant information disclosure report can now qualify for a maximum award of no less than $20,000.
As far as the M365 bounty program is concerned, Microsoft is offering a series of bonuses. For instance, certain remote code execution reports can earn a 30 percent bonus over the maximum award.
“Eligible submissions may qualify for 15-30% bonuses on top of the general M365 bounty awards and will be awarded the single highest qualifying award,” Microsoft says. “These new bounty awards are part of our continued efforts to partner with the security research community as part of Microsoft’s holistic approach to defending against security threats. If you have any questions about these new scenarios or any other security research incentive program, please email us at [email protected].”
Microsoft is one of the companies that are paying big bucks in bounties for vulnerabilities in its software, and as part of the program, the company can pay up to $26,000 for eligible scenario scenarios, with all the bonuses included on top of the top award.