Microsoft has announced an important change to the company's bug bounty program – security researchers will now be eligible ...

Critical vulnerabilities found in third-party applications eligible for award under 'in scope by default' move Microsoft is ...

Microsoft now pays security researchers for finding critical vulnerabilities in any of its online services, regardless of whether the code was written by Microsoft or a third party.

All critical vulnerabilities in Microsoft, third-party, and open source code are eligible for rewards if they impact Microsoft services.

Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with content, and download exclusive resources. Vivek Yadav, an engineering manager from ...