Microsoft hands out $100,000 in bounty for Windows 8.1 flaw; fixes critical IE vulnerability

Microsoft has awarded its first $100,000 bounty reward to a security researcher for discovering a issues in Windows 8.1. The company kicked off the compensation hunt for flaws and vulnerabilities in both Cyberspace Explorer 11 and Windows 8.1, with bounties ranging upward to $11,000 and $100,000 respectively.

The large bounty was picked up by James Forshaw, a security researcher at Context Information Security. Detailing a issues that bypassed protections in the preview version of windows viii.i, Forshaw was able to pocketbook the total $100,000 advantage. Microsoft volition particular the exploit once the visitor has addressed it.

So how much has Microsoft paid out altogether for bugs in its bounty programs? Over $128,000. While the IE11 hunt has come to a close, the visitor is notwithstanding looking for any bugs in Windows 8.one, so be sure to become hunting if you're subsequently a advantage for making the OS more secure for consumers.

Besides equally focusing on securing its software with help from the community, Microsoft continues to release security updates to address vulnerabilities in its products. We can relay that Microsoft has patched a critical flaw in Internet Explorer that could expose users to malware and hacks for at least three months.

The exploit, known every bit CVE-2013-3893, had the capability to integrate into all supported versions of the pop web browser. Microsoft acknowledged the vulnerability in September, releasing a temporary tool to patch IE until the permanent ready was released. Microsoft's Dustin Childs said the following in a web log mail service:

"The almost astringent vulnerabilities could allow remote lawmaking execution if a customer views a specially crafted webpage using Internet Explorer. An aggressor who successfully exploited these vulnerabilities could gain the aforementioned rights as the current user running Internet Explorer."

The patch contains not but the fix for this issue, simply also 10 other problems within IE. 26 different vulnerabilities in Windows, Internet Explorer, SharePoint, .Cyberspace Framework, Office, Silverlight, and more were likewise highlighted in the web log post.

Source: Microsoft (1) (2), via: CNET, The Verge; thank you, unstoppablekem, for the tip!

History catches up

The problem for a consumer HoloLens was always the lack of Windows Phone

What is the future for Microsoft (and Windows) mixed reality? The latest report from Business concern Insider sheds some lite, but this all comes back to one major trouble for Microsoft: No mobile Windows OS. But what well-nigh a futurity headset that is cloud-based? Some thoughts on what could happen for Microsoft mixed reality.

What a mesh

Connect your dwelling house to the all-time mesh Wi-Fi router organization

For dwelling house networking, mesh Wi-Fi systems provide more reliable coverage than a unmarried router. Check out our pick of the best mesh Wi-Fi router systems to ensure you never deal with betoken dead spots over again.

Source: https://www.windowscentral.com/microsoft-hands-out-100k-windows-8-1-flaw

Posted by: judkinswrue1972.blogspot.com

Share this post