Latest Bug Bounty Program news

ExpressVPN offering $100,000 to first person who hacks its servers

ExpressVPN has updated its bug bounty program to make it more inviting to ethical hackers, now offering a one-time $100,000 bug bounty to whoever can compromise its systems.
- Bill Toulas
- February 08, 2022
- 11:18 AM
- 0
Intel unveils Circuit Breaker bug bounty expansion for elite hackers

Intel says its engineers are partnering with security researchers to hunt for vulnerabilities in firmware, GPUs, hypervisors, chipsets, and other products in a new expansion to its bug bounty program.
- Sergiu Gatlan
- February 02, 2022
- 12:54 PM
- 0
Cloudflare launches a paid public bug bounty program

Cloudflare, an American company focused on web infrastructure and website security, has announced the launch of a new public bug bounty program.
- Sergiu Gatlan
- February 01, 2022
- 03:56 PM
- 0
DHS announces 'Hack DHS' bug bounty program for vetted researchers

The Department of Homeland Security (DHS) has launched a new bug bounty program dubbed "Hack DHS" that allows vetted cybersecurity researchers to find and report security vulnerabilities in external DHS systems.
- Sergiu Gatlan
- December 14, 2021
- 03:38 PM
- 0
Google launches Android Enterprise bug bounty program

Google has announced the launch of its first vulnerability rewards program for Android Enterprise with bounties of up to $250,000.
- Sergiu Gatlan
- October 21, 2021
- 12:00 PM
- 0
CISA launches vulnerability disclosure platform for federal agencies

The Cybersecurity and Infrastructure Security Agency (CISA) today launched a new vulnerability disclosure policy (VDP) platform for US federal civilian agencies.
- Sergiu Gatlan
- July 30, 2021
- 04:08 PM
- 0
Hacker earns $2 million in bug bounties on HackerOne

Inhibitor181 is the first bug bounty hunter to earn more than $2,000,000 in bounty awards through the vulnerability coordination and bug bounty program HackerOne.
- Sergiu Gatlan
- December 24, 2020
- 08:20 AM
- 0
Pandemic year increases bug bounties and report submissions

Vulnerability submissions have increased over the past 12 months on at least one crowdsourced security platform, with critical issue reports recording a 65% jump.
- Ionut Ilascu
- December 15, 2020
- 11:18 AM
- 1
Bug bounty reporter cashes out on someone else's exploit

While bug bounty programs have gained increased momentum and interest from the security research community for their role in promoting security awareness and responsible vulnerability disclosure, they are not without their share of problems.
- Ax Sharma
- October 19, 2020
- 09:39 AM
- 0
Microsoft pays over $370,000 for Azure Sphere bug reports

Microsoft awarded over $370,000 in bounties to security researchers for 16 bounty eligible reports of vulnerabilities submitted through the Azure Sphere Security Research Challenge (ASSRC) IoT-focused research program.
- Sergiu Gatlan
- October 06, 2020
- 12:00 PM
- 0
Microsoft paid almost $14M in bounties over the last 12 months

Microsoft has awarded $13.7 million to security researchers who have reported vulnerabilities over the last 12 months through 15 bug bounty programs, between July 1st, 2019, and June 30th, 2020.
- Sergiu Gatlan
- August 04, 2020
- 12:00 PM
- 0
Sony launches PlayStation bug bounty program with $50K+ rewards

Sony today announced the launch of a public PlayStation bug bounty program to pay security researchers and gamers for security vulnerabilities found in PlayStation 4 devices, the PlayStation Network domains.
- Sergiu Gatlan
- June 24, 2020
- 03:41 PM
- 0
$100 million in bounties paid via HackerOne to ethical hackers

Bug bounty platform HackerOne announced today that $100,000,000 in rewards were paid out to white-hat hackers around the world as of May 26, 2020.
- Sergiu Gatlan
- May 27, 2020
- 10:15 AM
- 0
Microsoft launches IoT-focused bounty program with $100K awards

Microsoft announced today the launch of a new IoT-focused research program with awards of up to $100,000 for vulnerabilities found by security researchers in the Azure Sphere IoT security solution.
- Sergiu Gatlan
- May 05, 2020
- 02:12 PM
- 0
Microsoft Launches Xbox Bounty Program With $20K Maximum Payout

Microsoft just announced the launch of an Xbox bug bounty program to allow gamers and security researchers to report security vulnerabilities found in the Xbox Live network and services.
- Sergiu Gatlan
- January 30, 2020
- 01:51 PM
- 3
Google Pays $6.5 Million to Hackers for Reporting Security Bugs

More than $6.5 million were paid to researchers for reporting security bugs through Google's Vulnerability Reward Program (VRP) in 2019, the company said in an announcement published today.
- Sergiu Gatlan
- January 28, 2020
- 03:45 PM
- 0
Google Adds $1.5 Million Top Reward to Android Bug Bounty Program

Google is expanding the Android bug bounty program with new data exfiltration and lockscreen bypass categories as well as a $1 million reward for critical vulnerabilities targeting the Titan M chip.
- Lawrence Abrams
- November 21, 2019
- 12:38 PM
- 0
Bugcrowd Paid Over $500K in Bug Bounties in One Week

Crowdsourced security company Bugcrowd announced today that it paid over $500K ($513,333) to 237 whitehat hackers in a single week for the first time since launching its bug bounty platform more than seven years ago.
- Sergiu Gatlan
- November 08, 2019
- 09:00 AM
- 0
Facebook Encourages Bug Hunting in Third-Party Services

Facebook updated the terms of its bug bounty program for third-party services integrating with the platform to increase the rewards received by researchers.
- Ionut Ilascu
- October 16, 2019
- 06:32 AM
- 0
Singapore's GovTech Launches Vulnerability Disclosure Program

Singapore's Government Technology Agency (GovTech) has launched a new vulnerability disclosure program on HackerOne so researchers can disclose vulnerabilities in government sites.
- Lawrence Abrams
- October 01, 2019
- 02:38 PM
- 0