Microsoft Boosts Bug Bounty Awards for Dynamics 365 and Power Platform

Microsoft has updated its bug bounty program for Dynamics 365 and Power Platform. The updates include new award structures, increased bounty amounts, and additional high-impact scenario categories.

The bug bounty program is open to researchers who submit vulnerabilities in Microsoft's products and services. Researchers can earn between $1,250 and $60,000 depending on the severity of the vulnerability and the impact it has on users.

One notable change is the introduction of high-impact scenario awards, which provide award multipliers of up to 100 percent. These scenarios include critical severity cross-tenant vulnerabilities, Power Platform escalation of privileges in Dataverse from an entry point, and Dataverse Plugin Sandbox 'guest to host' escape.

The program also includes a dedicated category for AI bounty awards, with topics such as inference manipulation and inferential information disclosure.