Microsoft expands Copilot bug bounty targets, adds payouts for even moderate messes

Microsoft is so concerned about security in its Copilot products for folks that it’s lifted bug bounty payments for moderate-severity vulnerabilities from nothing to a maximum of $5,000, and expanded the range of vulnerabilities it will pay people to find and report. The payouts for less severe vulns were introduced because …

[Anonymous Coward]

What does God need with a starship?

If the damn AI is so good, why does it need humans to find and fix its bugs?

/"Physician heal thyself" too.

[The Indomitable Gall]

Re: What does God need with a starship?

It's only going after programmers' jobs, and it's cheaper than programmers. Sure, we'll need more debuggers, but we'll need less programmers!

[Lost in Cyberspace]

Can I report...

... the unwelcome, automated installs and pop-ups as a bug?

[Yorick Hunt]

Re: Can I report...

I was about to say, "Microsoft expands Copilot bug" is where the headline should've ended.

[David 132]

Why the HPE co-branding on the masthead?

Is the roiling turd-on-a-stick that is Copilot really something that the marketing weasels at HPE want to be associated with?

[bsilva66]

Translation

So basically, Microsoft is paying people to use copilot?

[DMcDonnell]

Big bug found

Big bug found; it's called Copilot. Stamp out the bug! Apply some roach spray.