Microsoft Launches a Bounty Program for Finding Vulnerabilities in Its AI-Powered Bing

Bradley Rhodes -

Microsoft has introduced an AI Bounty Program, offering rewards up to $15,000 to security researchers who uncover vulnerabilities in its AI-driven Bing experience. The program aims to boost security and encourage experts to scrutinize Bing's chatbot and its integration with Microsoft products.

Earning Rewards:

  • Researchers globally can earn between $2,000 and $15,000 for valid vulnerability reports.
  • Minors aged 14 and up can participate with parental consent.
  • Government employees can join, with rewards going to their organizations.

Researchers can analyze AI-powered Bing experiences on Bing.com, Microsoft Edge, Microsoft Start (iOS and Android), and Skype (iOS and Android).

Vulnerabilities must be "critical" or "important," reproducible in the latest product version, and have clear steps for replication.

Microsoft Unveils Major Windows 11 Update with AI Features
Microsoft has announced its latest update for Windows 11, which will start rolling out on September 26th. This update brings several significant improvements, including an AI-powered assistant, enhanced file management, and revamped applications.
Recorded News — Tech NewsBradley Rhodes

Responsible Disclosure:

  • Researchers should use the MSRC Researcher Portal and specify "Bing" as the category.
  • Out-of-scope issues may not qualify for rewards.

Rewards range from $2,000 to $15,000, potentially higher based on severity, and Microsoft also acknowledges researchers whose findings lead to fixes.

Microsoft's AI Bounty Program enhances AI security and promotes collaboration with the cybersecurity community for safer AI products and services.