If it's hard to find a bug yourself, let the computer help find and slap a beautiful reward. ðĻ
Microsoft announced an update to the Bug Bounty program for .NET and ASP.NET Core weighing up to $40,000, or about $1.4 million, for anyone who can successfully report a serious vulnerability like Remote Code Execution (RCE) or Privilege Escalation.
.
This round of updates not only increases prize money, but also expands the scope to include various technologies, including all versions of .NET, ASP.NET Core on the .NET Framework, F #, various templates, as well as GitHub Actions that are in .NET's repo and ASP.NET Core.
.
The move is part of the Secure Future Initiative (SFI) plan, launched by Microsoft in late 2023 to reinforce security seriousness. After criticism that the measure is not concise enough, increasing rewards is like signaling global security researchers to help find a vulnerability before it falls into the hands of hackers.
.
The reward money is divided according to the seriousness and quality of the report. The highest level of vulnerability, such as RCE and Privilege Escalation, reported with complete documentation, will receive a full $40,000. The Security Feature Bypass also has a reward of $30,000. And other vulnerabilities, such as DoS or leaked information, also have rewards of thousands to tens of thousands of dollars.
.
Microsoft has also gradually upgraded the Bug Bounty program to other products such as Power Platform, Dynamics 365, and AI Copilot with added motivation bonuses. This .NET update is another golden opportunity for the Security and Dev lines to grab money from their penetration skills. Because money is really in the air, just know where to find it.
.
Source: neowin




























































