Samsung Launches Bug bounty Program - Offering Bounty Of Up To $200,000

Samsung’s launches bug bounty program and will reward up to $200,000 to anyone who discovers vulnerabilities in its mobile devices and associated software.

With the growing number of cyber attacks, a number of tech companies have started Bug Bounty Programs for encouraging hacker’s to find vulnerabilities in their services and get rewarded.

Samsung says,”We take security and privacy issues very seriously; and as an appreciation for helping Samsung Mobile improve the security of our products and minimizing risk to our end-consumers, we are offering a rewards program for eligible security vulnerability reports,”.

Mobile Security Rewards Program, the newly launched Bug Bounty Program by Samsung will cover 38 Samsung mobile devices released from 2016 onwards which currently receive security updates from the company.

Eligible Samsung Mobile Devices: Galaxy S series – S8, S8+, S8 Active, S7, S7 edge, S7 Active, S6 edge+, S6, S6 edge, S6 Active, J7 2016 and 2017 series, Galaxy A series, Galaxy Tab series and Galaxy Note series.{Visit Here To See The List}

Samsung Bug Bounty Program will also reward bug hunters if they found vulnerabilities in service like Bixby, Pay, Samsung Pass and applications signed by Samsung Mobile or approved third-party packages.

For eligibility of rewards, bug hunters need to provide a valid proof-of-concept(PoC) of the exploit without requiring any physical access or third-party application.

Only currently-active services and fully-updated applications are eligible, however low-probability attacks, such as debugger-level attacks, or phishing and clickjacking, are excluded from the Bug Bounty Program.

The reward will be evaluated depending upon the security level of the vulnerability – Critical, High, Moderate and Low depending upon the security risk and impact. The least reward starts from $200 and goes all the way up to $200,000.

Bugs submitted for the bounty will be subject to a responsible disclosure policy. Which involves responding within a maximum of 48 hours upon receiving the initial report and from the researcher ends – privately notifying of any security vulnerabilities before disclosing them fully to allow Samsung to resolve the vulnerabilities and release the patch within 90 days and minimize overall risk.

So, what you are waiting for? Start hunting for vulnerabilities in Samsung products and submit your report to the Samsung Bug Bounty Reward Page.

Get more stuff like this
in your inbox

Subscribe Us And Get Latest Tech News, Hacking News, Science News, And Latest Gadgets News Directly Delivered To Your Inbox

Thank You For Subscribing. Verification Email Has Been Send To You. Please Verify !

Something Went Wrong.


Please enter your comment!
Please enter your name here