Security News > 2020 > January > Microsoft invites gamers and researchers to new Xbox bug bounty program

Gamers, security researchers, and technologists have been invited to identify security vulnerabilities in Xbox network and services and report them to Microsoft.

Microsoft runs a number of bug bounty programs and has now decided that their Xbox offerings need extra attention from security researchers.

"The bounty program supplements our existing investments in security development and testing to uncover and remediate vulnerabilities which have a direct and demonstrable impact on the security of Xbox customers," said Chloé Brown, Program Manager, Program Manager at the Microsoft Security Response Center.

Microsoft is looking for reports on a wide variety of bugs: from cross site scripting and cross site request forgery to injection vulnerabilities, server-side code execution flaws and weaknesses arising from significant security misconfiguration.

Out of scope vulnerabilities include flaws in Microsoft game studios, Mixer, GamePass, xCloud, Xbox.com, other Microsoft products, and more.

News URL

http://feedproxy.google.com/~r/HelpNetSecurity/~3/MVG4omfqD5E/