Google Partially Reverses Chrome Bug Bounty Cuts
Google announced Tuesday that it’s raising bug bounty rewards for some Chrome vulnerabilities, focusing on memory safety issues.
AI has been changing the pace and profile of vulnerability discovery, and the tech giant has been adjusting its bug bounty programs in recent months.
Google significantly lowered standard payout amounts for some Chrome vulnerabilities in April to shift focus to actionable reports, with researchers noting that some rewards became 10 times smaller. At the time it announced a base reward of $500 for memory safety issues, with multipliers for reachability and the level of exploitability.
The company is now quadrupling base rates for memory safety flaws, to $2,000. Despite the increase, the new rates remain well below those offered before the April overhaul.
Vulnerabilities in Chrome’s browser, GPU and network processes can now earn researchersup to $20,000. In the case of the renderer process, bug bounty hunters can receive up...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE
