Windows 10: Not able to report a bug on Windows OS in the MSRC portal.

Shri_Ram · Feb 9, 2021

Hi Team,

I am not able to report a basic bug on the MSRC portal https://msrc.microsoft.com/create-report, after giving the necessary issue details and attaching the screenshots of the issue. Please find below the screenshot of the same. Can someone guide me on how to?

:)

Brink · Feb 9, 2021

MSRC Recognizing Security Researchers in 2020

Is it too early to talk about the 2020 MSRC Most Valuable Security Researchers? Five months from now, at the end of June, the program period closes for researchers to be considered for inclusion in the Most Valuable Researchers list. The top researcher list will be revealed at Black Hat North America in August.

For now, we want to explain who will get recognized as a MSRC Most Valuable Security Researcher for 2020, introduce the new MSRC Contributor tier in our researcher recognition program, and share some tips that can help you get into our top researcher tiers.

2020 Most Valuable Security Researcher

How do I get in?

Similar to last year, we take report volume, accuracy and impact into consideration. Here are the two paths to get into this top tier for reporting over the program period:

Path One: Contribution-based (recognizes a larger body of work)

Volume: you reported at least five valid vulnerabilities during the evaluation period

Accuracy: at least 50% of your reports are valid (your accuracy score)

Impact: the average points of your valid vulnerability reports put you at or above the 50th percentile for report impact

Path Two: Impact-based (recognizes a smaller body of higher-impact work)

Volume: You reported at least three valid vulnerabilities during the evaluation period

Accuracy: at least 50% of your reports are valid (your accuracy score)

Impact: the average points of your valid vulnerability reports put you at or above the 90th percentile for report impact

What do I get?

If you are identified as a 2020 MSRC Most Valuable Security Researcher, you’re eligible for benefits, including but not limited to:

Annual recognition on the MSRC’s Most Valuable Security Researcher list

Special SWAG box for Most Valuable Researchers

Access to Microsoft products and services for research purposes

Access to invitation-only MSRC events

Invitation to private MSRC programs

How about the ranking?

Either the contribution-based or impact-based model can get you into the top tier. Once you’re in, your rank within that tier will depend on the total number of points you’ve received.

2020 MSRC Contributor

How do I get in?

MSRC Contributor is the next tier in our researcher recognition program. The criteria for getting into this tier are:

Volume: you reported at least three valid vulnerabilities during the evaluation period

Accuracy: at least 50% of your reports are valid (your accuracy score)

Impact: the average points of your valid vulnerability reports put you at or above the 50th percentile for report impact

What do I get?

If you are identified as a 2020 MSRC Contributor, you’re eligible for, including but not limited to:

Special SWAG box for MSRC Contributors

Access to invitation-only MSRC events

When do I need to report by to be considered?

The program period for the 2020 Most Valuable Security Researcher and MSRC Contributor includes cases that fall into either of these categories:

Reported and assessed by the MSRC team between July 1, 2019 and June 30, 2020

Submitted between July 1, 2018 and June 30, 2019 (last program period), but assessed after July 1, 2019

What’s next?

We are five months away until the end of the program period. Here are some tips to help you get into the top tier:

Research in certain areas (e.g. Azure and Identity) can help you earn additional research multipliers. Check out our MSRC Recognition Program page showing you where you can find additional multipliers to improve your standings.

Focus your reach on critical and high impact vulnerabilities to get higher base points. Here are some useful readings:

Security Update Severity Rating System

Directory of Azure Services

Example of High Quality Reports

Microsoft Documentation for end users, developers, and IT professionals

Microsoft Security Research & Defense Blog

HackerOne’s Hacker101 training

Bugcrowd University

Ready to submit your next vulnerability report? Submit it today via our researcher portal aka.ms/secure-at.

Sylvie Liu, Security Program Manager, Microsoft Security Response Center
Click to expand...

Source: https://msrc-blog.microsoft.com/2020...chers-in-2020/

Tweet

— Twitter API (@user) View on Twitter
Click to expand...

Brink · Feb 9, 2021

MSRC 2017 list of Top 100 security researchers

Security researchers play an essential role in Microsoft’s security strategy and are key to community-based defense. To show our appreciation for their hard work and partnership, each year at BlackHat North America, the Microsoft Security Response Center highlights contributions of these researchers through the list of “Top 100” security researchers reporting to Microsoft.

This list ranks security researchers reporting directly to Microsoft according to the quantity and quality of all reports for which we’ve issued fixes. While one criteria for the ranking is volume of reports a researcher has made, the severity and impact of the reports is very important to the ranking. Higher-impact issues carry more weight than lower-impact ones. While this list does not include security researchers who report to our partners ZDI and iDefense as we do not always have full information to recognize their efforts, we very much appreciate the partnership with ZDI and iDefense as they ensure that we know about any reports affecting Microsoft products.

Given the number of individuals reporting to Microsoft, anyone ranked among the Top 100 is among some of the top talent in the industry. Regardless of where security researchers are ranked in this list, we appreciate their active and ongoing participation with the Microsoft Security Response Center, and encourage new researchers to report potential vulnerabilities to us at L: secure@microsoft.com. We’re excited to see who’s going to be on the list next year.

MSRC team
Click to expand...

Source: The MSRC 2017 list of “Top 100” security researchers MSRC

Abolfazl Ahmadlou · Feb 9, 2021

What happening after reporting a security bug

Today accidently I found a security bug on my Windows Phone 8 and I checked it's correctly to be sure about it. Now I didn't report it to MSRC because I want to know what happening after that. Do they have any reward or patent right for reporter (Absolutely
if it be correct)?

Windows 10: Not able to report a bug on Windows OS in the MSRC portal.

Not able to report a bug on Windows OS in the MSRC portal.

Not able to report a bug on Windows OS in the MSRC portal.

Not able to report a bug on Windows OS in the MSRC portal.

Not able to report a bug on Windows OS in the MSRC portal. - Similar Threads - able report bug

Filing an MSRC Report

Filing an MSRC Report

How do I report a OS bug to Microsoft?

How do I report a OS bug to Microsoft?

How do I report a OS bug to Microsoft?

Bug Report

report a bug

Bug Report

Report a bug