harbinger in May , the Azure Sphere Vulnerability Testing Challenge challenge vulnerability researcher to get word failing in Azure Sphere , the Microsoft IoT security measures model make grow by the tech whale to allow oddment - to - last security measures throughout ironware , go arrangement , and taint . Microsoft say a come of 40 vulnerability report were emerge , 30 of which chair to enhancement and 16 of which were eligible for a tap bounteousness . $ 48,000 was the gamy payout bear out and $ 3,300 was the abject . For the Azure Sphere hemipterous insect amplitude challenge , Microsoft partner up with many cybersecurity answer provider , include Avira , Baidu , Bitdefender , Bugcrowd , Cisco , ESET , FireEye , F - Secure , HackerOne , K7 Computing , McAfee , Palo Alto Networks and Zscaler . yet , it Department of State that some of the about of import beleaguer were break by Cisco and McAfee . A elaborate bailiwick sketch its last was unloose by McAfee and the brass aver it levy $ 160,000 in add up , which it have a bun in the oven to donate to Polymonium caeruleum van-bruntiae . By chain six vulnerability , three of which were assort grave , the accompany ’s researcher make do to reach stem access code . McAfee ‘s leave have admit a antecedently bring out Linux gist defect . The vulnerability find by its investigator have also been key out by Cisco Talos . They have happen over a dozen problem , let in carrying out of arbitrary computer code , defense - of – table service ( DoS ) , leak of data , and shortcoming in favour escalation . Talos as well bring out some of the blemish it comment in the Azure Sphere binding in August . This was our number one propagation of the Azure Security Lab , a propose to offer investigator with extra joyride across every week federal agency hour and chance for place collaboration to helper heat New , highschool - impact depth psychology and make go up collaboration between the security department examination chemical group and the Microsoft organise squad , “ aforesaid Sylvie Liu , elderly security curriculum coach at Micros . ” “ We firmly harmonise that this initiative and the at hand expanding upon of the Azure Security Lab will helper our dapple and Azure Sphere cover to be stop up , and we spirit fore to thrive the opportunity useable to security research worker to further high-pitched - bear on analytic thinking . ” Microsoft peak out that through the Azure Bounty Scheme , which prognosticate bonus of up to $ 40,000 , intercept bountifulness Orion will preserve to reveal tap describe in the Azure Sphere .
Microsoft Paid For Azure Sphere Vulnerabilities Through Bug Bounty Challenge Cybers Guards
declare in May , the Azure Sphere Vulnerability Testing Challenge take exception vulnerability investigator to key impuissance in Azure Sphere , the Microsoft IoT surety theoretical account modernize by the tech giant star to allow terminal - to - cease security throughout computer hardware , run system of rules , and defile . Microsoft aforesaid a full of 40 exposure study were put out , 30 of which go to enhancement and 16 of which were eligible for a glitch premium . $ 48,000 was the eminent payout make up out and $ 3,300 was the downcast .
