Navigation section
customer protection
-
Microsoft Bounty Program Updates: Faster bounty review, faster payments, and higher rewards
Link Removed In 2018 The Microsoft Bounty Program awarded over $2,000,000 to encourage and reward external security research in key technologies to protect our customers. Building on that success, we are excited to announce a number of improvements in our bounty programs to better serve the...- News
- Thread
- assessment azure bounty program bug bounty cloud services community customer protection duplicate reports hackerone microsoft online services payment processing payments policies research research areas rewards security vulnerability
- Replies: 0
- Forum: Security Alerts
-
Announcing the new Bug Bounty Program for Office Insider Builds on Windows
We’ve engineered Office to be secure by design and continually invest in enhancing its security capabilities. In the spirit of maintaining a high security bar in Office, we’re launching the Bug Bounty Program for Office Insider Builds on Windows. The Office Bug Bounty Program complements our...- News
- Thread
- bug bounty cloud services code execution customer protection early access incentives macros march 2017 microsoft office office insider penetration testing protected view quality assurance reward program security testing updates user feedback vulnerabilities windows
- Replies: 0
- Forum: Security Alerts
-
Introduction: Chris Betz, new head of MSRC
By way of introduction, I am Chris Betz, the leader of the Microsoft Security Response Center (MSRC). I’m stepping in to fill the shoes of Mike Reavey, who has moved on to become the General Manager of Secure Operations, still within Trustworthy Computing. Since joining the MSRC, I’ve spent...- News
- Thread
- bounty program chris betz customer protection cyber attacks dedication enterprise security global team information security it professionals microsoft msrc progress report response security security incident security research technology trustworthy computing update tuesdays vulnerability
- Replies: 0
- Forum: Security Alerts
-
Improved cryptography infrastructure and the June 2013 bulletins
It was just over one year ago, May 28, 2012, to be exact, that I transitioned from running active MSRC cases and writing bulletins to my current role managing software security incidents. A lot has changed in that year - and I’ve dealt with some interesting issues during my tenure - but...- News
- Thread
- certificate trust cryptography cumulative updates customer protection deployment priority digital certificates internet explorer june 2013 microsoft office pki remote code execution security security advisories software security trustworthy computing update management vulnerabilities windows 7 windows updates windows vista
- Replies: 0
- Forum: Security Alerts
-
Microsoft Releases Security Advisory 2847140
Today, we released Security Advisory 2847140 regarding an issue that impacts Internet Explorer 8. Internet Explorer 6, 7, 9 and 10 are not affected by the vulnerability. This issue allows remote code execution if users browse to a malicious website with an affected browser. This would typically...- News
- Thread
- activex controls advisory anti-virus customer protection firewall guidance internet explorer microsoft mitigations remote code execution scripting security threat landscape upgrade vulnerability
- Replies: 0
- Forum: Security Alerts
-
Microsoft Security Advisory (2719662): Vulnerabilities in Gadgets Could Allow Remote Code Execution
Revision Note: V1.0 (July 10, 2012): Advisory published. Summary: Microsoft is announcing the availability of an automated Microsoft Fix it solution that disables the Windows Sidebar and Gadgets on supported editions of Windows Vista and Windows 7. Disabling the Windows Sidebar and...- News
- Thread
- advisory arbitrary code automated solution computer security customer protection fix it gadgets insecure gadgets malware microsoft remote code execution security software trusted sources updates vista vulnerabilities windows windows 7
- Replies: 0
- Forum: Security Alerts
-
Microsoft Security Advisory (2719662): Vulnerabilities in Gadgets Could Allow Remote Code Execution
Revision Note: V1.0 (July 10, 2012): Advisory published. Summary: Microsoft is announcing the availability of an automated Microsoft Fix it solution that disables the Windows Sidebar and Gadgets on supported editions of Windows Vista and Windows 7. Disabling the Windows Sidebar and...- News
- Thread
- advisory arbitrary code automated solution customer protection fix it gadgets insecure gadgets microsoft remote code execution security untrusted sources vulnerabilities windows 7 windows vista
- Replies: 0
- Forum: Security Alerts
-
Microsoft Security Advisory (2728973): Unauthorized Digital Certificates Could Allow Spoofing - Vers
Revision Note: V1.0 (July 10, 2012): Advisory published. Summary: Microsoft is aware of Microsoft certificate authorities that are outside our recommended secure storage practices. Upon a routine review, we are placing these certificates in the Untrusted Certificate Store, and...- News
- Thread
- advisory customer protection digital certificates microsoft pki public key infrastructure security spoofing untrusted store windows
- Replies: 0
- Forum: Security Alerts
-
Proof-of-Concept Code available for MS12-020
On March 15, we became aware of public proof-of-concept code that results in denial of service for the issue addressed by MS12-020, which we released Tuesday. We continue to watch the threat landscape and we are not aware of public proof-of-concept code that results in remote code execution...- News
- Thread
- active protections program confidential information customer protection cve-2012-0002 denial of service deployment mapp program microsoft mitigation ms12-020 optimal decisions proof-of-concept remote code execution security security update software partners threat landscape trustworthy computing update vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
More on DigiNotar Certificates, and September Bulletins
In an effort to protect customers, last week we released Security Advisory 2607712 along with a non-security update to add fraudulent DigiNotar certificates to the Windows Untrusted Certificate Store. Today, we are releasing another update (2616676), adding six additional DigiNotar root...- News
- Thread
- advisory bulletins certificates customer protection cybertrust deployment diginotar enhancements entrust microsoft monthly release pkioverheid root ca security severity testing untrusted store update webcast windows
- Replies: 0
- Forum: Security Alerts
-
Microsoft Releases Security Advisory 2488013
Hello, Today we released Security Advisory 2488013 to address a public vulnerability that could affect customers using Internet Explorer 6, 7 and 8 if they visit a website hosting malicious code. Currently the impact of this vulnerability is limited and we are not aware of any affected...- News
- Thread
- advisory anti-virus customer protection data protection firewall internet explorer malicious code malicious sites malware microsoft protected mode risk management security security update software security technical guidance threat landscape updates vulnerability windows vista
- Replies: 0
- Forum: Security Alerts