Category: Microsoft|Apr 4, 2021 | Author: Admin

Microsoft elevates Teams' importance by offering top-dollar bug bounties

Share on

The company has launched a new bug bounty program for Teams that offers as much as $30,000 to security researchers for previously-unknown vulnerabilities. It's a sign of the software's growing importance.

There's nothing like $30,000 to show that an app has made it to the big time.

Microsoft last week underscored the importance of Teams to its current and future strategic planning by inaugurating a new bug bounty program that will offer up to $30,000 — twice the maximum of any Office application — to security researchers for reporting previously-unknown vulnerabilities.

Out the gate, the new program, carrying the prosaic label "Microsoft Applications Bounty Program," focused exclusively on the Teams desktop client. Other applications will be brought into the program, Microsoft said, though no timeline was given.

In an online document that detailed the new bug bounty program, Microsoft listed five specific scenarios — "high-impact," the company said — that came with rewards from $6,000 to $30,000. The largest bounty was for vulnerabilities described as "remote code execution (native code in the context of the current user) with no user interaction."

Flaws in Teams that led to an "ability to obtain authentication credentials for other users*(note: does not include phishing)" would rate a maximum of $15,000.

A rate sheet of general bugs — from remote code execution vulnerabilities to spoofing or tampering — was also included, with rewards ranging from $500 to $15,000, depending on the severity of the flaw, and the quality and thoroughness of the finder's reporting.


In comparison, Microsoft's bounties in its "Office Insider Builds on Windows" program max out at $15,000. The only other application for which Microsoft cuts bounty checks as large as $30,000 is its Edge browser. (Microsoft also listed $30,000 as the maximum for vulnerabilities in the Windows Defender Application Guard, which isn't an app per se, but a security feature within Windows.)

One can get a broad idea of the importance Microsoft places on the various parts of its software ecosystem by eyeing the rate sheets for its numerous bounty programs. While the new Teams rewards are top-tier for an application, they're dwarfed by the $100,000 maximums for Windows and its identity services.


A complete list of all Microsoft's bounty programs can be found here.

Sponsored Ads:

Comments:


Think Xbox may die

Category: Microsoft|Mar 29, 2024 | Author: Admin

Locked out 8 million Telegram users, then this happened

Category: IT|Mar 28, 2024 | Author: Admin

Mac update fixes important bugs

Category: Apple|Mar 27, 2024 | Author: Admin

The Windows Format Dialog Remains Unchanged After 30 Years

Category: Microsoft|Mar 26, 2024 | Author: Admin

Google's new AI search results promotes sites pushing malware, scams

Category: Google|Mar 25, 2024 | Author: Admin

YouTube ordered not to talk about it

Category: IT|Mar 24, 2024 | Author: Admin

It became too difficult for Apple

Category: Apple|Mar 23, 2024 | Author: Admin

Windows 11 Notepad finally gets spellcheck and autocorrect

Category: Microsoft|Mar 22, 2024 | Author: Admin

This is how Android 15 gets better

Category: Google|Mar 21, 2024 | Author: Admin

Warns Apple

Category: Apple|Mar 20, 2024 | Author: Admin

Microsoft again bothers Chrome users with Bing popup ads in Windows

Category: Microsoft|Mar 19, 2024 | Author: Admin

Increased by 164 percent

Category: IT|Mar 18, 2024 | Author: Admin

Anthropic launches its fastest and cheapest AI model yet

Category: IT|Mar 17, 2024 | Author: Admin

What is Darwin AI and how could Apple use its new tech?

Category: Apple|Mar 16, 2024 | Author: Admin

DO NOT update Minecraft!

Category: IT|Mar 15, 2024 | Author: Admin
more