Researcher Portal における提出フォームの更新：提出フォームの新しいフィールドについて
Thursday, July 20, 2023
本ブログは、Updated Researcher Portal Submission Form: Discover the New Fields in the Submission Form の抄訳版です。最新の情報は原文を参照してください。
Security Research
Updated Researcher Portal Submission Form: Discover the New Fields in the Submission Form
Thursday, July 20, 2023
Summary: We are excited to announce the release of the updated Researcher Portal submission form. These new fields allow Security Researchers to provide additional context for the reported security issue, providing product teams with more data for analysis, gain insights and identify trends across multiple reported security vulnerabilities. The additional fields are not mandatory fields to submit a report.
From Bounty Leaderboards to Microsoft Security Researcher, Meet Cameron Vincent!
Monday, July 17, 2023
Fun Facts: Game you binged: Guitar Hero and Rock Band fanatic. Go to snack: Nutri-Grain Bars. Favorite Drink: Soda – Coca Cola specifically. Favorite Place: Singapore – stayed an extra week after a hacking collaboration and truly fell in love and hopes to get back as soon as possible. Favorite Movie/Genre: Parasite – Korean Cinema, had been watching Koren Cinema before it became a thing.
What to expect when reporting vulnerabilities to Microsoft
Friday, July 14, 2023
At the Microsoft Security Response Center (MSRC), our mission is to protect our customers, communities, and Microsoft from current and emerging threats to security and privacy. One way we achieve this is by working with security researchers to identify and fix security vulnerabilities in our services and products that could pose a threat to our customers.
Congratulations to the Top MSRC 2023 Q2 Security Researchers!
Friday, July 14, 2023
Congratulations to all the researchers recognized in this quarter’s Microsoft Researcher Recognition Program leaderboard! Thank you to everyone for your hard work and continued partnership to secure customers. The top three researchers of the 2023 Q2 Security Researcher Leaderboard are: Yuki Chen, HAO LI, wkai! Check out the full list of researchers recognized this quarter here.
Hey Yara, find some vulnerabilities
Thursday, June 08, 2023
Intro Finding vulnerabilities in software is no easy task by itself. Doing this at cloud scale is very challenging to perform manually, and we use tools to help us identify patterns or vulnerability signatures. Yara is one of those tools. Yara is a very popular tool with Blue teams, malware researchers, and for good reason.
Microsoft Vulnerability Severity Classification for Online Services Publication
Tuesday, April 18, 2023
The Microsoft Security Response Center (MSRC) is always looking for ways to provide clarity and transparency around how we assess the impact of vulnerabilities reported in our products and services. We have published a new Microsoft Vulnerability Severity Classification for Online Services to provide additional information about our approach to online services and web applications.
マイクロソフトのオンラインサービスにおける、脆弱性の深刻度分類の公開
Tuesday, April 18, 2023
本ブログは、Microsoft Vulnerability Severity Classification for Online Services Publication の抄訳版です。最新の情報は原文を参照してください。 マイク
Announcing the Microsoft Machine Learning Membership Inference Competition (MICO)
Wednesday, November 16, 2022
We’re excited to announce the launch of a new competition focusing on the security and privacy of machine learning (ML) systems. Machine learning has already become a key enabler in many products and services, and this trend is likely to continue. It is therefore critical to understand the security and privacy guarantees provided by state-of-the-art ML algorithms – indeed this is one of Microsoft’s Responsible AI Principles.
New Research Paper: Pre-hijacking Attacks on Web User Accounts
Monday, May 23, 2022
In 2020, MSRC awarded two Identity Project Research Grants to support external researchers working to further strengthen the security of identity protocols and systems. Today we are pleased to release the results of the first of these projects. This research, led by independent security researcher Avinash Sudhodanan, investigated account pre-hijacking – a new class of attacks affecting websites and other online services.