Congratulations to the Top MSRC 2023 Q2 Security Researchers! | MSRC Blog Congratulations to all the researchers recognized in this quarter’s Microsoft Researcher Recognition Program leaderboard! Thank you to everyone for your hard work and continued partnership to secure customers. The top three researchers of the 2023 Q2 Security Researcher Read more…
From Bounty Leaderboards to Microsoft Security Researcher, Meet Cameron Vincent! | MSRC Blog Fun Facts: Game you binged: Guitar Hero and Rock Band fanatic. Go to snack: Nutri-Grain Bars. Favorite Drink: Soda – Coca Cola specifically. Favorite Place: Singapore – stayed an extra week after a hacking collaboration and truly Read more…
Updated Researcher Portal Submission Form: Discover the New Fields in the Submission Form | MSRC Blog Summary: We are excited to announce the release of the updated Researcher Portal submission form. These new fields allow Security Researchers to provide additional context for the reported security issue, providing product teams with Read more…
BlueHat October 2023 Call for Papers is Now Open! | MSRC Blog As you may have seen on social media, the next BlueHat conference will be October 11 – 12, 2023, on Microsoft’s Redmond campus in Washington state, USA. The Call for Papers (CFP) is now open through August 18, Read more…
Microsoft mitigates Power Platform Custom Code information disclosure vulnerability | MSRC Blog On 30 March 2023, Tenable informed Microsoft under Coordinated Vulnerability Disclosure (CVD) of a security issue concerning Power Platform Custom Connectors using Custom Code. This feature allows customers to write code for custom connectors. This issue has been Read more…
Microsoft Bug Bounty Program Year in Review: $13.8M in Rewards | MSRC Blog We are thrilled to share the results of our collaboration with over 345 security researchers from +45 countries around the world in the past 12 months. Together, we have discovered and fixed more than a thousand potential Read more…
Congratulations to the MSRC 2023 Most Valuable Security Researchers! | MSRC Blog The Microsoft Researcher Recognition Program offers public thanks and recognition to security researchers who help protect our customers through discovering and sharing security vulnerabilities under Coordinated Vulnerability Disclosure. Today, we are excited to recognize this year’s top 100 Read more…
Updating our Vulnerability Severity Classification for AI Systems | MSRC Blog The Microsoft Security Response Center (MSRC) is always looking for ways to provide clarity and transparency around how we assess the impact of vulnerabilities reported in our products and services. To this end, we are announcing the Microsoft Vulnerability Read more…
Azure Serial Console Attack and Defense – Part 1 | MSRC Blog Ever had a virtual machine crash? Azure Serial console is a great way to directly connect to your Virtual machine and debug what went wrong. Azure Serial Console is a feature that’s available for free for everyone. While Read more…
Results of Major Technical Investigations for Storm-0558 Key Acquisition | MSRC Blog On July 11, 2023, Microsoft published a blog post which details how the China-Based threat actor, Storm-0558, used an acquired Microsoft account (MSA) consumer key to forge tokens to access OWA and Outlook.com. Upon identifying that the threat Read more…