Microsoft Offers New Bug Bounties for Spectre, Meltdown-Type Flaws

Microsoft is offering a short-term bug bounty program for speculative execution side-channel vulnerabilities and threats.

Microsoft last week announced new bug bounties for speculative execution side-channel vulnerabilities. These vulnerabilities, of which Spectre and Meltdown were the first known examples, represent a new class of problem and Microsoft would like to know what else might be lurking in the neighborhood.
The bug bounties - on offer through December 31, 2018 - are:
According to Microsoft, Tier 1 vulnerabilities are new attacks, Tiers 2 and 3 are techniques that get around protections already put in place against existing vulnerabilities, and Tier 4 is a demonstrating an actual successful attack method using already known vulnerabilities.
Phillip Misner, principal security group manager at the Microsoft Security Response Center, said in Microsofts post announcing the program: Speculative execution side channel vulnerabilities require an industry response. To that end, Microsoft says that they will share any discovered vulnerabilities and attacks with the industry in ethical, industry standard forms.
For more, read
here
and
here
.

Join Dark Reading LIVE for two cybersecurity summits at Interop ITX. Learn from the industry’s most knowledgeable IT security experts. Check out the
security track here
.

Last News
▸ Security Talk: 7 Ways To Grab Users Attention ◂ Discovered: 26/12/2024 Category: security	▸ Gartner: Secure Mobile Users Early ◂ Discovered: 26/12/2024 Category: security	▸ Security pros top concern: Rogue employees, study finds. ◂ Discovered: 26/12/2024 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Microsoft Offers New Bug Bounties for Spectre, Meltdown-Type Flaws