Latest Vulnerability Rewards Program news

Google now pays $250,000 for KVM zero-day vulnerabilities

Google has launched kvmCTF, a new vulnerability reward program (VRP) first announced in October 2023 to improve the security of the Kernel-based Virtual Machine (KVM) hypervisor that comes with $250,000 bounties for full VM escape exploits.
- Sergiu Gatlan
- July 02, 2024
- 02:06 PM
- 0
Google now pays up to $450,000 for RCE bugs in some Android apps

Google has increased rewards for reporting remote code execution vulnerabilities within select Android apps by ten times, from $30,000 to $300,000, with the maximum reward reaching $450,000 for exceptional quality reports.
- Sergiu Gatlan
- April 30, 2024
- 02:33 PM
- 0
US Defense Dept received 50,000 vulnerability reports since 2016

The Cyber Crime Center (DC3) of the U.S. Department of Defense (DoD) says it has reached the milestone of processing its 50,000th vulnerability report submitted by 5,635 researchers since its inception in November 2016.
- Bill Toulas
- March 19, 2024
- 05:13 PM
- 0
HackerOne paid ethical hackers over $300 million in bug bounties

HackerOne has announced that its bug bounty programs have awarded over $300 million in rewards to ethical hackers and vulnerability researchers since the platform's inception.
- Bill Toulas
- October 28, 2023
- 11:17 AM
- 0
Google triples rewards for Chrome sandbox escape chain exploits

Google announced today that bug bounty hunters who report sandbox escape chain exploits targeting its Chrome web browser are now eligible for triple the standard reward until December 1st, 2023.
- Sergiu Gatlan
- June 01, 2023
- 12:00 PM
- 0
Google launches bug bounty program for its Android applications

Google has launched the Mobile Vulnerability Rewards Program (Mobile VRP), a new bug bounty program that will pay security researchers for flaws found in the company's Android applications.
- Sergiu Gatlan
- May 22, 2023
- 05:18 PM
- 1
Google paid $12 million in bug bounties to security researchers

Google last year paid its highest bug bounty ever through the Vulnerability Reward Program for a critical exploit chain report that the company valued at $605,000.
- Ionut Ilascu
- February 22, 2023
- 04:17 PM
- 0
Google launches open-source software bug bounty program

Google will now pay security researchers to find and report bugs in the latest versions of Google-released open-source software (Google OSS).
- Sergiu Gatlan
- August 30, 2022
- 07:00 AM
- 2
Google gives 50% bonus to Android 13 Beta bug bounty hunters

Google has announced that all security researchers who report Android 13 Beta vulnerabilities through its Vulnerability Rewards Program (VRP) will get a 50% bonus on top of the standard reward until May 26th, 2022.
- Sergiu Gatlan
- April 29, 2022
- 01:48 PM
- 0
Google almost doubles Linux Kernel, Kubernetes zero-day rewards

Google says it bumped up rewards for reports of Linux Kernel, Kubernetes, Google Kubernetes Engine (GKE), or kCTF vulnerabilities by adding bigger bonuses for zero-day bugs and exploits using unique exploitation techniques.
- Sergiu Gatlan
- February 15, 2022
- 03:38 PM
- 0
Google launches Android Enterprise bug bounty program

Google has announced the launch of its first vulnerability rewards program for Android Enterprise with bounties of up to $250,000.
- Sergiu Gatlan
- October 21, 2021
- 12:00 PM
- 0
Google launches new Bug Hunters vulnerability rewards platform

Google has announced a new platform and community designed to host all its Vulnerability Rewards Programs (VRP) under the same roof.
- Sergiu Gatlan
- July 27, 2021
- 09:31 AM
- 0