Kaspersky cybersecurity firm has just increased the amount it is offering in its Bug Bounty program up to $100 000, for persons who are able to spot and report severe vulnerabilities in some of its leading products.
The firm in a statement said “The opportunity to get this bounty is available to all members of the famous HackerOne platform, Kaspersky Lab’s partner for the Bug Bounty program.”
“This is a 20-fold increase on existing rewards and is evidence of the company’s commitment to ensuring the complete integrity of its products and protection for customers.”
The products Kaspersky wants investigated includes; Kaspersky Internet Security 2019, and Kaspersky Endpoint Security 11 (the most recent beta), running on Desktop Windows version 8.1 or higher, with the most recent updates installed.
This does not necessarily mean once someone finds a bug in Kaspersky’s software he/she automatically gets $100K. Rather, it is a tiered reward program in which bounties are offered for the discovery of different types of remote code execution; bounties can range from $5 000 to $20 000 based on how complex the vulnerabilities are.
That prize is being offered for “the discovery of bugs that enable remote code execution via the product database update channel, with the launch of malware code taking place silently from the user in the product’s high privilege process and being able to survive the reboot of the system.”
The CEO of the firm Eugene Kaspersky, was quoted saying “Finding and fixing bugs is a priority for us as a software company.”
“We invite security researchers to make sure there are no vulnerabilities in our products. The immunity of our code and highest levels of protection that we offer customers is a core principal of our business and a fundamental pillar of our Global Transparency Initiative.”
