Don't miss our upcoming Network Computing virtual event on Connectivity Solutions - Secure Your Complementary Seat Now!
Microsoft Corp. on Tuesday criticized a security company's recent offer of $10,000 to someone who discovers a Windows flaw that leads to a critical fix, saying the program is not the best way to protect customers.
IDefense started offering the bounty last week as an addition to its controversial Vulnerability Contributor Program, launched in 2005.
“Microsoft works closely with many security research and security software companies and does not believe that offering compensation for vulnerability information is the best way they can help protect their customers," the company said in an email. "Microsoft believes that responsible disclosure, which involves making sure that an update is available from software vendors the same day the vulnerability is first broadly known, is the best way to protect the end user.”
IDefense executives say the reason for the program is to get researchers to focus on security issues that are a priority to the company's clients. To qualify for the latest offer, which expires March 31, a researcher would have to report a vulnerability that Microsoft eventually classifies as a "critical" fix.
Experts have criticized such bounties as creating a market for vulnerabilities and blurring the lines between hackers looking to write viruses that exploit Windows, and legitimate researchers looking to protect users.
What skills do network managers really need to properly secure industrial networks? What new protocols, frameworks, and regulations are important? And what conferences and certifications can help? Here are five tips to get started.
A full-stack approach to retail edge offers retailers a way to optimize operations and adapt to changes in a post-pandemic world.
Network management tool sprawl is getting in the way of network management. It’s time for IT to do something about it.
