AI システムのために脆弱性における深刻度分類を更新しました。
Tuesday, August 08, 2023
本ブログは、Updating our Vulnerability Severity Classification for AI Systems の抄訳版です。最新の情報は原文を参照してください。 マイクロ
2023
Congratulations to the MSRC 2023 Most Valuable Security Researchers!
Tuesday, August 08, 2023
The Microsoft Researcher Recognition Program offers public thanks and recognition to security researchers who help protect our customers through discovering and sharing security vulnerabilities under Coordinated Vulnerability Disclosure. Today, we are excited to recognize this year’s top 100 Most Valuable Researchers (MVRs) based on the total number of points earned for each valid report.
Updating our Vulnerability Severity Classification for AI Systems
Tuesday, August 08, 2023
The Microsoft Security Response Center (MSRC) is always looking for ways to provide clarity and transparency around how we assess the impact of vulnerabilities reported in our products and services. To this end, we are announcing the Microsoft Vulnerability Severity Classification for AI Systems, an update to Microsoft’s existing vulnerability severity classification (i.
Microsoft Bug Bounty Program Year in Review: $13.8M in Rewards
Monday, August 07, 2023
We are thrilled to share the results of our collaboration with over 345 security researchers from +45 countries around the world in the past 12 months. Together, we have discovered and fixed more than a thousand potential security issues before they impacted our customers. In recognition of this valuable collaboration, we have awarded $13.
マイクロソフトバグ報奨金プログラムの年間レビュー : 1,380万ドルの報酬
Monday, August 07, 2023
本ブログは、Microsoft Bug Bounty Program Year in Review: $13.8M in Rewards の抄訳版です。最新の情報は原文を参照してください。 過
Microsoft mitigates Power Platform Custom Code information disclosure vulnerability
Friday, August 04, 2023
Summary On 30 March 2023, Tenable informed Microsoft under Coordinated Vulnerability Disclosure (CVD) of a security issue concerning Power Platform Custom Connectors using Custom Code. This feature allows customers to write code for custom connectors. This issue has been fully addressed for all customers and no customer remediation action is required.
マイクロソフトは、Power Platformにおけるカスタム コードの情報漏えいの脆弱性を修正しました。
Friday, August 04, 2023
本ブログは、Microsoft mitigates Power Platform Custom Code information disclosure vulnerability の抄訳版です。最新の情報は原文を参照してください。 概要
BlueHat October 2023 Call for Papers is Now Open!
Thursday, July 27, 2023
As you may have seen on social media, the next BlueHat conference will be October 11 – 12, 2023, on Microsoft’s Redmond campus in Washington state, USA. The Call for Papers (CFP) is now open through August 18, 2023. The BlueHat community is a unique blend of security researchers and responders from both inside and outside of Microsoft, who come together as peers to exchange ideas, experiences, and learnings in the interest of creating a safer and more secure world for all.
Researcher Portal における提出フォームの更新：提出フォームの新しいフィールドについて
Thursday, July 20, 2023
本ブログは、Updated Researcher Portal Submission Form: Discover the New Fields in the Submission Form の抄訳版です。最新の情報は原文を参照してください。
Updated Researcher Portal Submission Form: Discover the New Fields in the Submission Form
Thursday, July 20, 2023
Summary: We are excited to announce the release of the updated Researcher Portal submission form. These new fields allow Security Researchers to provide additional context for the reported security issue, providing product teams with more data for analysis, gain insights and identify trends across multiple reported security vulnerabilities. The additional fields are not mandatory fields to submit a report.