Microsoft Awards $2.3 Million After Zero Day Quest Identifies 80+ Cloud and AI Flaws
Summary
Microsoft says it awarded $2.3 million after nearly 700 submissions to Zero Day Quest, where researchers identified more than 80 high-impact cloud and AI flaws. Testing was limited to authorized environments; findings will be shared through the CVE program.
Key points
- Microsoft reported more than 80 high-impact cloud and AI vulnerabilities identified during the live event.
- Researchers submitted nearly 700 findings and received $2.3 million in awards.
- Microsoft said researchers identified critical paths involving credential exposure, SSRF chains and cross-tenant access.
- Testing took place in authorized environments and, Microsoft said, did not access customer data or other tenants.
- The Zero Day Quest prize pool was raised to $5 million; Microsoft said findings will be shared through the CVE program.
Article Details
- Event Type
- Microsoft Zero Day Quest vulnerability research contest and bug bounty
- Impact
- Microsoft awarded $2.3 million after nearly 700 submissions. The live event identified over 80 high-impact cloud and AI vulnerabilities, including issues involving credential exposure, SSRF chains, and cross-tenant access. Microsoft said testing stayed within authorized environments and did not access customer data or other tenants' systems; findings will be shared through the CVE program.