Vulnerabilities Rewards Program News Today

Google: Google ‘thanks’ Indian researcher for keeping Android safe and secure - Rashtra News : Rashtra News #google #Google #Indian #researcher #keeping #Android #safe #secure #Times #India Almost every big tech company has a bug bounty program under which it pays security researchers to discover ‘flaws’ and vulnerabilities in its software and other services. Google […]

Hackers Setup Fake Cyber Security Firm To Target Security Researchers April 3, 2021 Google’s Threat Analysis Group (TAG), a Google security team specialized in hunting advanced persistent threat (APT) groups, on Wednesday shared that a North Korean government-backed campaign is targeting cybersecurity researchers with malware via social media. For those unaware, in January 2021, TAG had disclosed a hacking campaign, targeting security researchers working on vulnerability research and develo...

The website had a link to the hackers’ PGP public key at the bottom of the page. Early this year, researchers reported that the PGP key hosted on the attacker’s blog acted as the lure to visit the site where a browser exploit was waiting to be triggered. Google researchers said they hadn’t seen this new fake website serving malicious content but have added it to Google Safebrowsing as a precaution. The hackers set up several social media accounts to pose as fellow security researchers...

The figure, up from the $6.5 million the company paid in 2019, is the companys largest prize pool paid to security researchers to date. Most of last years bug prizes were awarded in the Chrome VRP (Vulnerabilities Rewards Program), which handed out more than $2.1 million to security researchers for 300 bugs identified in Googles flagship browser. Another major VRP was the companys Android programs. Google said it gave out $1.74 million for bugs discovered in the Android OS code and another $270...