Security News > 2023 > October > New Microsoft bug bounty program focuses on AI-powered Bing

Microsoft announced a new AI bounty program focused on the AI-driven Bing experience, with rewards reaching $15,000.
AI-powered Bing experiences on bing.com in Browser AI-powered Bing integration in Microsoft Edge, including Bing Chat for Enterprise.
"The Microsoft AI bounty program invites security researchers from across the globe to discover vulnerabilities in the new, innovative, AI-powered Bing experience. Qualified submissions are eligible for bounty rewards from $2,000 to $15,000 USD," Microsoft explains on the AI bounty program's website.
"Submissions identifying vulnerabilities in Bing related online services will be considered under the M365 Bounty Program. All submissions are reviewed for bounty eligibility, so don't worry if you aren't sure where your submission fits."
In a recent bounty year-in-review blog post, Microsoft said it paid $13.8 million in rewards to 345 security researchers worldwide who reported 1,180 vulnerabilities across 17 different bug bounty programs.
Last year, the company added on-premises Exchange, SharePoint, and Skype for Business to its bug bounty program and increased the maximum awards for high-impact security flaws reported through the Microsoft 365 program.
News URL
Related news
- Microsoft expands Copilot bug bounty targets, adds payouts for even moderate messes (source)
- Microsoft names cybercriminals behind AI deepfake network (source)
- Microsoft Exposes LLMjacking Cybercriminals Behind Azure AI Abuse Scheme (source)
- AI agents swarm Microsoft Security Copilot (source)
- Microsoft’s new AI agents take on phishing, patching, alert fatigue (source)
- After Detecting 30B Phishing Attempts, Microsoft Adds Even More AI to Its Security Copilot (source)
- Week in review: Chrome sandbox escape 0-day fixed, Microsoft adds new AI agents to Security Copilot (source)
- Microsoft uses AI to find flaws in GRUB2, U-Boot, Barebox bootloaders (source)
- April 2025 Patch Tuesday forecast: More AI security introduced by Microsoft (source)
- EncryptHub's dual life: Cybercriminal vs Windows bug-bounty researcher (source)