{"id":58198,"date":"2025-02-20T23:59:17","date_gmt":"2025-02-20T23:59:17","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/microsoft-expands-copilot-bug-bounty-targets-adds-payouts-for-even-moderate-messes\/"},"modified":"2025-02-20T23:59:17","modified_gmt":"2025-02-20T23:59:17","slug":"microsoft-expands-copilot-bug-bounty-targets-adds-payouts-for-even-moderate-messes","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/microsoft-expands-copilot-bug-bounty-targets-adds-payouts-for-even-moderate-messes\/","title":{"rendered":"Microsoft expands Copilot bug bounty targets, adds payouts for even moderate messes"},"content":{"rendered":"

Microsoft is so concerned about security in its Copilot products for folks that it\u2019s lifted bug bounty payments for moderate-severity vulnerabilities from nothing to a maximum of $5,000, and expanded the range of vulnerabilities it will pay people to find and report.<\/p>\n

The payouts for less severe vulns were introduced because the software giant thinks “even moderate vulnerabilities can have significant implications for the security and reliability of our Copilot consumer products,” explained<\/a> Microsoft bounty team members Lynn Miyashita and Madeline Eckert earlier this month.<\/p>\n

Under the Copilot Bounty Program<\/a>, researchers who identify and disclose previously unknown vulnerabilities can earn between $250 and $30,000. As is typical in bug bounty programs, higher payouts are reserved for those who report the most serious vulnerabilities, such as code injection or model manipulation.<\/p>\n