research community

  1. Extending the Microsoft Edge Bounty Program

    Over the past ten months we have paid out over $200,000 USD in bounties. This collaboration with the research community has resulted in significant improvements in Edge security and has allowed us to offer more proactive security for our customers. Keeping in line with our philosophy of...
    • News
    • Thread
    • bounty payouts bounty program collaboration continuous effort critical issues customers cybersecurity design controversy incentives insider preview microsoft microsoft edge privacy remote code execution reports research community security terms and faqs vulnerabilities
    • Replies: 0
    • Forum: Security Alerts

  2. Bountycraft at Nullcon 2017

    Security is a critical component of our products at Microsoft. A strong emphasis on security is a persistent factor throughout our entire development process. Microsoft is committed to designing and developing secure software. Testing is performed both internally and by working closely with the...
    • News
    • Thread
    • asia authentication bounty program bug bounty china cloud computing cross-site scripting impact india microsoft microsoft azure mitigation nullcon privilege escalation research community security security software vulnerabilities windows 10 workshops
    • Replies: 0
    • Forum: Security Alerts

  3. Microsoft Bounty Programs Expansion - Bounty for Defense, Authentication Bonus, and RemoteApp

    I am very pleased to be releasing additional expansions of the Link Removed. Please stop by the Microsoft Networking Lounge at Black Hat, August 5-6, to learn more about these programs; or, visit Link Removed. We are raising the Bounty for Defense maximum from $50,000 USD to $100,000 USD. I am...
    • News
    • Thread
    • authentication azure active directory black hat bounty program bug bounty contest defense bounty feedback las vegas microsoft networking lounge online services payouts penetration testing remoteapp research community sdl security research vulnerabilities
    • Replies: 0
    • Forum: Security Alerts

  4. Microsoft hosts BlueHatv11, releases four bulletins

    Hello, On this November Update Tuesday, we’re recapping the Link Removed, which Microsoft hosted in Redmond last week. We are also releasing four security updates, so please read on for details. Microsoft hosted its Link Removed of the BlueHat conference Nov. 2-4. The event featured...
    • News
    • Thread
    • bluehat bulletin cve deployment exploitability installation microsoft november protection remote code execution research research community security tcp/ip trustworthy computing update vulnerability webcast
    • Replies: 0
    • Forum: Security Alerts

  5. Announcing the BlueHat Prize for Advancement of Exploit Mitigations

    Protecting the general computing ecosystem is a really tough job, and given some of the media headlines, it’s easy to get discouraged and wallow in the problems. It seems like we’re constantly bombarded with statistics measuring the number of bugs, vulnerabilities, or attacks in an...
    • News
    • Thread
    • active protections program bluehat prize collaboration computing ecosystem customers cybersecurity defense technology exploit prevention global security incentives industry collaboration innovation microsoft prizes research community security challenges security research security vendors threat landscape vulnerabilities
    • Replies: 0
    • Forum: Security Alerts

  6. Community-Based Defense: Looking Outward, Moving Forward

    Two years ago, in front of a standing-room only crowd here at Black Hat, we introduced three new information sharing programs as well as the concept of Community-Based Defense. The underlying concept shared by all three programs was simple-collaboration will be key to preventing and defending...
    • News
    • Thread
    • adobe black hat collaboration community defense coordinated vulnerability customer needs cybersecurity digital crime emet exploitability feedback information sharing mitigation toolkit protection providers research community security ecosystem security landscape trustworthy computing vulnerabilities vulnerability disclosure
    • Replies: 0
    • Forum: Security Alerts