Wednesday, March 12, 2025
HomeBug BountyMicrosoft Offer $100,000 To Hack Azure Sphere Linux IoT OS Using RCE...

Microsoft Offer $100,000 To Hack Azure Sphere Linux IoT OS Using RCE Exploits

Published on

SIEM as a Service

Follow Us on Google News

The tech giant Microsoft has just announced a huge reward of $100,000 for hacking the Azure Sphere OS; it is the very first Linux-based operating system of Microsoft, that is focused on the Internet of Things.

This initiative of the tech giant Microsoft is just like the other large technology companies that use to test the security of their operating systems.

This challenge will last three months and makes its hardware, operating system, and cloud components that shape its Azure Sphere platform available to the security experts.

With this challenge, Micorosft simply wants to check the strength of its recent Linux-based operating system, Azure Sphere OS, in terms of security, which, as in other areas, is also vital in the IoT (Internet of Things), where millions of devices can be used in DDoS attacks.

Azure Sphere is the tech giant Microsoft’s product that offers security solutions so that businesses and customers can safely use the IoT devices; they simply allow to extend the virtual network into the real world, comprising everyday things.

In short, with Azure Sphere OS, Microsoft simply wants to assure its customers that, using its Azure Sphere OS, they can easily add several layers of protection to safeguard their connected devices and the information that is transferred between them.

Join the Microsoft challenge

This new Microsoft Challenge will start on 1st June 2020 and will last up to 31st August 2020. Interested security researchers are required to execute the codes on Azure Pluton and Azure Secure World, and the tech giant Microsoft will provide the eligible security researchers the following tools that we have mentioned below.

  • Azure Sphere development kit (DevKit).
  • Access to Microsoft products and services for research objectives.
  • Azure Sphere product documentation.
  • Direct communication channels with the Microsoft Team.

So, to participate in this challenge, you have to submit your application form before May 15, 2020.

Moreover, all the applications will be checked every week, and accepted security researchers will be notified via email by Microsoft.

Though at the moment, Microsoft’s Azure Sphere OS is not widely used, and not only that, currently, it can be run on the MediaTek MT3620 chips only. But for the tech giant Microsoft, the key motto is to continue developing in the IoT and cloud sector.

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity and hacking news updates.

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

CYREBRO’s AI-Native MDR Platform Earns Silver at the 2025 Globee Cybersecurity Awards

CYREBRO, the AI-native Managed Detection and Response (MDR) solution, announced today that it won...

Aptori Now on Google Cloud Marketplace for AI-Powered Security and Automated Risk Remediation

Aptori’s AI-Driven AppSec Platform Proactively Eliminates Vulnerabilities to Minimize Risk and Ensure Compliance.Aptori, a...

MirrorFace APT Using Custom Malware To Exploited Windows Sandbox & Visual Studio Code

The cybersecurity landscape witnessed a significant development when the National Police Agency (NPA) and...

CISA Issues Advisory on Windows NTFS Flaw Enabling Local Code Execution

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an advisory regarding a...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

Meta’s Bug Bounty Initiative Pays $2.3 Million to Security Researchers in 2024

Meta's commitment to cybersecurity took center stage in 2024 as the tech giant awarded...

Researchers Breach Software Supply Chain and Secure $50K Bug Bounty

A duo of cybersecurity researchers uncovered a critical vulnerability in a software supply chain,...

Bug Bounty Bonanza: $40,000 Reward for Escalating Limited Path Traversal to RCE

As a dedicated bug bounty hunter with an enviable track record on BugCrowd, Abdullah...