tech π‘οΈ Microsoft Boosts Bug Bounty for Open Source π»
Microsoft has expanded its bug bounty program to cover open-source projects and third-party components. This expansion was part of the latest program year running from July 1, 2025, to June 30, 2026. The broader scope led to over 300 extra vulnerability reports, with Microsoft paying more than US$800,000 for these findings. This move acknowledges how much modern products depend on open-source software and interconnected cloud services. The company is also shortening NuGet API key lifetimes to further secure the supply chain.