
- Microsoft's 'In Scope by Default' bug bounty program is now open to submissions
- Proprietary, third-party and open source code are all included
- Microsoft paid out more than Google last year ($17 million)
Microsoft has announced an important change to the company's bug bounty program – security researchers will now be eligible to submit critical vulnerability reports across all company products and services, even where no formal bounty was available before.