8 months ago
Announcing BlueHat 2024: Call for Papers now open
The 23rd edition of Microsofts BlueHat security conference will be hosted by the Microsoft Security Response Center MSRC at the Redmond, WA corporate campus, October 29 and 30, 2024.BlueHat brings together security researchers and responders from both inside and outside of Microsoft, who come together as peers to exchange ideas, experiences, and best practices, all in the interest of creating a safer and more secure world for everyone.. https://msrc.microsoft.com...#microsoft
8 months ago
Congratulations to the MSRC 2024 Most Valuable Security Researchers!
The Microsoft Researcher Recognition Program offers public thanks and recognition to security researchers who help protect our customers through discovering and sharing security vulnerabilities under Coordinated Vulnerability Disclosure.Today, we are excited to recognize this years 100 Most Valuable Researchers MVRs, based on the total number of points earned for each valid report.. https://msrc.microsoft.com...
#microsoft
8 months ago
Microsoft Bounty Program Year in Review: $16.6M in Rewards
We are excited to announce that this year the Microsoft Bounty Program has awarded 16.6M in bounty awards to 343 security researchers from 55 countries, securing Microsoft customers in partnership with the Microsoft Security Response Center MSRC. Each year we identify over a thousand potential security issues together, safeguarding our customers from possible threats through the Microsoft Bounty Program.. https://msrc.microsoft.com...#microsoft
9 months ago
Introducing the MSRC Researcher Resource Center
Microsoft partners with the global security researcher community to surface and report security vulnerabilities to protect all users of Microsoft products and services. Researcher submissions help us address immediate threats while also identifying trends and insights to holistically improve the security of our products and services. Were always looking for ways to build upon this partnership, and with that goal in mind, we are excited to announce the creation of the MSRC Researcher Resource Center.. https://msrc.microsoft.com...#microsoft
9 months ago
Congratulations to the Top MSRC 2024 Q2 Security Researchers!
Congratulations to all the researchers recognized in this quarters Microsoft Researcher Recognition Program leaderboard Thank you to everyone for your hard work and continued partnership to secure customers. The top three researchers of the 2024 Q2 Security Researcher Leaderboard are Yuki Chen, Lewis Lee amp; Ver amp; Zhiniang Peng, and Wei. https://msrc.microsoft.com...#microsoft
9 months ago
9 months ago
How the CrowdStrike glitch crippled operations across the globe
A flaw in a software update from CrowdStrike, a firm that provides cybersecurity services through Microsoft for half of the Fortune 1000 companies, has caused a major worldwide tech outage. Carter Evans examines exactly what caused the glitch and how it is being fixed.. https://www.cbsnews.com/vi...#cbs_news #news
9 months ago
9 months ago
Announcing the CVRF API 3.0 upgrade
At the Microsoft Security Response Center, we are committed to continuously improving the security and performance of our services to meet the evolving needs of our customers. We are excited to announce the rollout of the latest version of our Common Vulnerability Reporting CVRF API. This update brings improvements in both security and performance, without requiring any changes to your existing invocation methods.. https://msrc.microsoft.com...#microsoft
10 months ago
What’s new in the MSRC Report Abuse Portal and API
The Microsoft Security Response Center MSRC has always been at the forefront of addressing cyber threats, privacy issues, and abuse arising from Microsoft Online Services. Building on our commitment, we have introduced several key updates to the Report Abuse Portal and API, which will significantly improve the way we handle and respond to abuse reports.. https://msrc.microsoft.com...#microsoft
10 months ago
Toward greater transparency: Unveiling Cloud Service CVEs
Welcome to the second installment in our series on transparency at the Microsoft Security Response Center MSRC. In this ongoing discussion, we discuss our commitment to provide comprehensive vulnerability information to our customers.At MSRC, our mission is to protect our customers, communities, and Microsoft, from current and emerging threats to security and privacy.. https://msrc.microsoft.com...#microsoft
10 months ago
Mitigating SSRF Vulnerabilities Impacting Azure Machine Learning
Summary On May 9, 2024, Microsoft successfully addressed multiple vulnerabilities within the Azure Machine Learning AML service, which were initially discovered by security research firms Wiz and Tenable. These vulnerabilities, which included Server-Side Request Forgeries SSRF and a path traversal vulnerability, posed potential risks for information exposure and service disruption via Denial-of-Service DOS.. https://msrc.microsoft.com...#microsoft
10 months ago
Bill Gates says there's "impressive" support for nuclear power amid new Wyoming plant
As Microsoft co-founder Bill Gates is moving ahead with a nuclear power plant in Wyoming, he tells "Face the Nation" that "support for nuclear power is very impressive in both parties" in Congress. "Of all the climate-related work I'm doing, I'd say the one that has the most bipartisan energy behind it is actually this nuclear work," Gates said.. https://www.cbsnews.com/vi...#cbs_news #news