Microsoft to Offer Standing Bug Bounty

Summary: Microsoft announced a bug bounty program launching June 26, 2013 that pays up to $100,000 for novel exploitation techniques against protections in Windows 8.1 Preview, plus up to $50,000 for defensive ideas accompanying a qualifying submission. A separate 30-day bounty of up to $11,000 covers critical flaws in Internet Explorer 11 Preview on Windows 8.1 Preview, and Microsoft's Mike Reavey said the research may help harden older versions of Windows and IE.
Key Takeaway: Microsoft is paying up to $150,000 for a single novel attack method, and commenters on the piece note that governments and criminals on the grey market may pay far more for the same exploit - the bounty sets a floor, not a ceiling, on what a working bypass is worth.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026