Microsoft Security Response Center · Scour

Why XSS still matters: MSRC’s perspective on a 25-year-old threat

msrc.microsoft.com·36w

BlueHat Asia 2025: Closing soon: Submit your papers by September 14, 2025

msrc.microsoft.com·38w

BlueHat Asia 2025: Closing soon: Submit your papers by September 5, 2025

msrc.microsoft.com·38w

postMessaged and Compromised

msrc.microsoft.com·38w·Lobsters, Hacker News, r/programming

Microsoft Bounty Program year in review: $17 million in rewards

msrc.microsoft.com·41w

Zero Day Quest: Join the largest hacking event with up to $5 million in total bounty awards

msrc.microsoft.com·41w

.NET Bounty Program now offers up to $40,000 in awards

msrc.microsoft.com·41w

.NET Bounty Program now offers up to $40,000 in awards

msrc.microsoft.com·41w

How Microsoft defends against indirect prompt injection attacks

msrc.microsoft.com·42w

Customer guidance for SharePoint vulnerability CVE-2025-53770

msrc.microsoft.com·43w·Hacker News

Congratulations to the MSRC 2025 Most Valuable Security Researchers!

msrc.microsoft.com·44w

Congratulations to the top MSRC 2025 Q2 security researchers!

msrc.microsoft.com·45w

Rising star: Meet Dylan, MSRC’s youngest security researcher

msrc.microsoft.com·46w

RedirectionGuard: Mitigating unsafe junction traversal in Windows

msrc.microsoft.com·47w·r/Windows11

Congratulations to the Top MSRC 2025 Q1 Security Researchers!

msrc.microsoft.com·53w

Zero Day Quest 2025: $1.6 million awarded for vulnerability research

msrc.microsoft.com·56w

Zero Day Quest 2025: $1.6 million awarded for vulnerability research

msrc.microsoft.com·56w

Announcing the winners of the Adaptive Prompt Injection Challenge (LLMail-Inject)

msrc.microsoft.com·61w

Jailbreaking is (mostly) simpler than you think

msrc.microsoft.com·61w

Exciting updates to the Copilot (AI) Bounty Program: Enhancing security and incentivizing innovation

msrc.microsoft.com·66w

Log in to enable infinite scrolling