Sign in

Microsoft Security Response Center

@msrc.microsoft.com
746 followers 10 following 172 posts

We are the Microsoft Security Response Center. To report security vulnerabilities or abuse in Microsoft products, visit microsoft.com/en-us/msrc.

PostsRepliesMedia
Microsoft Security Response Center @msrc.microsoft.com · 25/09/2026
Every security researcher starts somewhere. Firas Fatnassi shares how curiosity, persistence, and a commitment to learning shaped his journey from finding vulnerabilities as a teenager to becoming a respected voice in the security community. Read his story: www.microsoft.com/en-us/msrc/b...
Firas Fatnassi playing table tennis
010
Microsoft Security Response Center @msrc.microsoft.com · 19/09/2026
That’s a wrap on BlueHat Asia. Over the past two days, security researchers, defenders, engineers, and security leaders came together to share new research, challenge assumptions, and strengthen the security community.
100
Microsoft Security Response Center @msrc.microsoft.com · 18/09/2026
Day 2 of BlueHat Asia opened with remarks from Jeff Moss, founder of DEF CON and Black Hat, who reflected on the lessons he's learned from building security communities and navigating decades of technological change.
110
Microsoft Security Response Center @msrc.microsoft.com · 17/09/2026
Good morning from Singapore and welcome to Day 1 of BlueHat Asia 2026! Registration opens at 8:30 AM, followed by opening remarks from Tom Gallagher, VP of Engineering, MSRC and our keynote, The Age of Experimentation, presented by Halvar Flake.
020
Microsoft Security Response Center @msrc.microsoft.com · 16/09/2026
As BlueHat Asia kicks off, we had the opportunity to spend an evening with some of the people who make this community so special.
110
Microsoft Security Response Center @msrc.microsoft.com · 15/09/2026
We're pleased to welcome Jeff Moss @thedarktangent.defcon.social.ap.brid.gy, founder of DEF CON and Black Hat, to BlueHat Asia 2026, where he'll deliver the conference opening remarks.
Jeff Moss
150
Microsoft Security Response Center @msrc.microsoft.com · 10/09/2026
We're excited to announce Tom Gallagher Vice President of Engineering at the Microsoft Security Response Center (MSRC), as a keynote speaker at BlueHat Asia.
Tom Gallagher: BlueHat Asia keynote
130
Microsoft Security Response Center @msrc.microsoft.com · 08/09/2026
Security updates for September are now available: msft.it/6018SZEg0
September 2026 Patch Tuesday
110
Microsoft Security Response Center @msrc.microsoft.com · 05/09/2026
Security researchers help make Microsoft's products and services more secure every day. To support that work, we're introducing new MSRC Researcher Portal enhancements designed to provide clearer guidance, better visibility into report status, and improved ways to manage vulnerability submissions.
MSRC Researcher Portal updates
120
Microsoft Security Response Center @msrc.microsoft.com · 11/08/2026
Security updates for August 2026 are now available. Details are here: msft.it/6018SZEg0
020
Microsoft Security Response Center @msrc.microsoft.com · 07/08/2026
Thank you to everyone who joined us for the MSRC Researcher Celebration at Black Hat USA. We're incredibly grateful to the security research community for the partnership, trust, and collaboration that help protect customers around the world.
240
Microsoft Security Response Center @msrc.microsoft.com · 03/08/2026
A record-breaking year for Microsoft's Bounty Programs! This year, Microsoft awarded more than $20 million to 562 security researchers, the highest total payout and largest number of researchers recognized in program history. Read the full blog: aka.ms/microsoft-bo...
Microsoft Bounty Year in Review
030
Microsoft Security Response Center @msrc.microsoft.com · 16/07/2026
Learn more and view the full leaderboard: www.microsoft.com/en-us/msrc/blog/2026/07/congratulations-to-the-top-msrc-2026-q2-security-researchers
Q2 leaderboard
000
Microsoft Security Response Center @msrc.microsoft.com · 14/07/2026
Security updates for July 2026 are now available. Details are here: msft.it/6018SZEg0
Patch Tuesday July
010
Microsoft Security Response Center @msrc.microsoft.com · 08/07/2026
Thank you to every researcher who partnered with us this year to help protect customers worldwide.
Microsoft 2026 Most Valuable Researchers (MVR)
000
Microsoft Security Response Center @msrc.microsoft.com · 09/06/2026
Security updates for June 2026 are now available. Details are here: msft.it/6018SZEg0 #PatchTuesday
June 2026 Patch Tuesday
030
Microsoft Security Response Center @msrc.microsoft.com · 21/05/2026
BlueHat Asia is heading to Singapore on September 17–18! 👉Apply now for your chance to join us: aka.ms/bluehatreg Applications close July 17. #BlueHat
010
Microsoft Security Response Center @msrc.microsoft.com · 12/05/2026
Security updates for May 2026 are now available. Details are here: msft.it/6018SZEg0
Security Updates for May 2026
130
Microsoft Security Response Center @msrc.microsoft.com · 06/05/2026
Day 2 is underway at BlueHat. Here’s a look back at Day 1. A strong start, with the security community coming together to connect, share insights, and tackle real-world challenges. Watch the highlights ⬇️ #BlueHat
000
Microsoft Security Response Center @msrc.microsoft.com · 06/05/2026
Good morning, BlueHat, and welcome back to day 2 ☀️ We’ll start with opening remarks from Tom Gallagher, VP of Engineering, MSRC, followed by a keynote from Mark Russinovich, CTO, Deputy CISO, and Technical Fellow for Microsoft Azure. View the day 2 agenda: aka.ms/bh26agenda #BlueHat
BlueHat 2026
010
Microsoft Security Response Center @msrc.microsoft.com · 05/05/2026
At BlueHat 2026, Taesoo Kim, VP Security Research, Microsoft took the stage for the Day 1 keynote to discuss what’s next for security as AI systems begin to scale vulnerability discovery and remediation in ways we haven’t seen before. #BlueHat
Taesoo Kim, VP of Security Research, Microsoft
110
Microsoft Security Response Center @msrc.microsoft.com · 05/05/2026
Good morning, BlueHat! ☀️We’re excited to start Day 1 with you. Grab some breakfast and join us for opening remarks from Tom Gallagher, VP of Engineering, MSRC, followed by our keynote from Taesoo Kim, VP of Security Research at Microsoft. You can find the full agenda here: aka.ms/bh26agenda
140
Microsoft Security Response Center @msrc.microsoft.com · 05/05/2026
Thank you to all of our BlueHat speakers who joined us for the welcome reception this evening. It was great to connect and kick off the event. We are looking forward to welcoming everyone to BlueHat tomorrow.
040
Microsoft Security Response Center @msrc.microsoft.com · 01/05/2026
We’re excited to announce that Dr. Abhilasha Bhargav-Spantzel, Microsoft AI, and Jason Martin, Director, Adversarial Research, Hidden Layer, will be speaking at BlueHat with their session, “From Trusted Agents to Adversaries: Securing Agentic AI in the Age of Prompt Injection.”
Meet our BlueHat 2026 speakers: Abhilasha Bhargav-Spantzel and Jason Martin
121
Microsoft Security Response Center @msrc.microsoft.com · 30/04/2026
🎤 BlueHat Redmond speaker announcement We’re excited to announce our next speaker, Matt Swann, VP & Distinguished Engineering at Microsoft.
Meet Our BlueHat 2026 Speakers: Matt Swann
100
Microsoft Security Response Center @msrc.microsoft.com · 28/04/2026
We’ve updated the Microsoft 365 Insider Builds on Windows Bounty Program to better recognize impactful research and improve the submission experience for our community. Learn more: www.microsoft.com/en-us/msrc/b...
Microsoft 365 Insider Bounty program updates
021
Microsoft Security Response Center @msrc.microsoft.com · 27/04/2026
We’re thrilled to announce Taesoo Kim as the Day 1 BlueHat keynote speaker. Taesoo is Vice President of Security Research at Microsoft and a Professor at Georgia Tech in the School of Cybersecurity and Privacy and the School of Computer Science.
Meet Our BlueHat Redmond Speakers; Taesoo Kim
110
Microsoft Security Response Center @msrc.microsoft.com · 23/04/2026
Thank you to everyone who joined us for the MSRC Researcher Celebration at Black Hat Asia. It was great to connect with so many in the community and spend time sharing ideas and conversations.
MSRC researcher celebration at Black Hat Asia
010
Microsoft Security Response Center @msrc.microsoft.com · 22/04/2026
🎤 BlueHat Redmond speaker announcement We're excited to announce Varsha Chahal and Henrique Pereira Senior Security Engineers at Microsoft, will be speaking at BlueHat Redmond with their talk, “Gotta Catch’em All: Hunting Azure Anonymous Functions in the Wild.” #BlueHat
Meet our BlueHat Redmond speakers: Varsha Chahal and Henrique Pereira
010
Microsoft Security Response Center @msrc.microsoft.com · 21/04/2026
📣BlueHat Asia Call for Papers now open! 📣 We’re looking for talks on novel research that hasn’t been presented before, including vulnerability research, mitigations, emerging threats and techniques, and more! 📍Singapore | September 17–18 🗓️CFP deadline: June 15 Submit now: aka.ms/BlueHatAsiaCFP
124
Microsoft Security Response Center @msrc.microsoft.com · 14/04/2026
Security updates for April 2026 are now available. Details are here: msft.it/6018SZEg0 #PatchTuesday
April 2026 Patch Tuesday
030
Microsoft Security Response Center @msrc.microsoft.com · 13/04/2026
Through Zero Day Quest, Microsoft awarded $2.3 million to security researchers for eligible findings across cloud and AI services. Read how this collaboration is helping strengthen protections for customers in our blog post from Tom Gallagher, VP of Engineering, MSRC: msft.it/6017Q7p73
Zero Day Quest 2026: $2.3 million awarded for vulnerability research
021
Microsoft Security Response Center @msrc.microsoft.com · 10/04/2026
🗓️ Mark your calendars 🗓️ BlueHat is headed to Singapore, September 17–18. Call for Papers and registration announcements coming soon. 👀
045
Microsoft Security Response Center @msrc.microsoft.com · 07/04/2026
Congratulations to all the researchers recognized in this quarter’s MSRC 2026 Q1 Security Researcher Leaderboard! Thanks to all the researchers who partnered with us for your hard work and continued dedication to securing our customers. Learn more in our blog post: lnkd.in/gRViAQ2U
Quarterly leaderboard
120
Microsoft Security Response Center @msrc.microsoft.com · 03/04/2026
🚨 New $100,000 RCE award added 🚨 We’ve introduced a new $100,000 Remote Code Execution (RCE) award to the Microsoft Hyper‑V bounty program, recognizing high‑impact guest escape research and rewarding high-quality submissions. Learn more and submit: msft.it/6019Q0oxB
🚨 New $100,000 RCE award added 🚨
We’ve introduced a new $100,000 Remote Code Execution (RCE) award to the Microsoft Hyper‑V bounty program, recognizing high‑impact guest escape research and rewarding high-quality submissions.
030
Microsoft Security Response Center @msrc.microsoft.com · 02/04/2026
🚨Still time to apply to BlueHat Redmond! 🚨 Due to high interest, we’ve extended the application deadline through April 6. Join the security research community in Redmond on May 5–6. Apply here: aka.ms/bluehatreg
010
Microsoft Security Response Center @msrc.microsoft.com · 27/03/2026
🚨 Last chance for BlueHat Redmond Registration closes March 31 for one of the most unique security research events of the year. Join the security community on May 5-6 for two days of insights, collaboration, and cutting-edge discussions. 👉Register now: aka.ms/bluehatreg
000
Microsoft Security Response Center @msrc.microsoft.com · 17/03/2026
We’re excited to welcome some of the world’s top security researchers to Zero Day Quest 2026. We’re grateful to every researcher who qualified and joined us in person, as well as those participating remotely. Their work and partnership with Microsoft help protect customers and the world.
MSRC and security researchers at Zero Day QuestMSRC and security researchers at Zero Day Quest
031
Microsoft Security Response Center @msrc.microsoft.com · 10/03/2026
Security updates for March 2026 are now available. Details are here: msft.it/6018SZEg0 #PatchTuesday
March 2026 Patch Tuesday
031
Microsoft Security Response Center @msrc.microsoft.com · 05/03/2026
Security research never stops. Meet Zhiniang Peng, Microsoft MVR and two‑time Zero Day Quest Qualifier, whose persistence and curiosity continue to push security research forward. 👉 Read his story on the MSRC blog: www.microsoft.com/en-us/msrc/b...
Zhiniang Peng, Microsoft MVR and Zero Day Quest qualifier
000
Microsoft Security Response Center @msrc.microsoft.com · 20/02/2026
Every security researcher starts somewhere. For Felix, it began with arcades and led all the way to Azure. Now a Microsoft MVR and Zero Day Quest qualifier, Felix shares the persistence and mindset that shaped his path into security research in our latest blog: msft.it/63323Qn7BN
Felix (security researcher) artwork
000
Microsoft Security Response Center @msrc.microsoft.com · 18/02/2026
🎉 BlueHat Redmond registration is officially open! 🎉 We’re excited to welcome the security community back to Microsoft’s Redmond campus for BlueHat 2026, taking place May 5–6, 2026. Don’t miss your chance to connect, learn, and share with the community. ➡️Register now: aka.ms/bluehatreg
052
Microsoft Security Response Center @msrc.microsoft.com · 14/02/2026
Got some downtime this weekend? It’s the perfect time to submit your talk to BlueHat Redmond. The Call for Papers is open now. No paper required, just a great idea and a detailed abstract. Learn more in our blog post: www.microsoft.com/en-us/msrc/b... Submit your abstract here: aka.ms/BH26CFP
021
Microsoft Security Response Center @msrc.microsoft.com · 12/02/2026
XSS persists not because it’s misunderstood, but because mitigations often miss where execution actually happens. In this post, we share what’s proven effective in practice, why common fixes fail, and how to move toward sustainable XSS defense: www.microsoft.com/en-us/msrc/b...
Fixing the script: Journey to reduce XSS exposure
000
Microsoft Security Response Center @msrc.microsoft.com · 10/02/2026
Security updates for February 2026 are now available. Details are here: msft.it/6018SZEg0 #PatchTuesday #SecurityUpdateGuide
Patch Tuesday February 2026
000
Microsoft Security Response Center @msrc.microsoft.com · 06/02/2026
We’re evolving how researcher impact is recognized. Beginning with the July 2026 MVR leaderboard, rankings will reflect bounty award amounts, and all valid reports will be acknowledged with honorable mentions. Details: www.microsoft.com/en-us/msrc/b...
The evolution of the Microsoft security researcher leaderboard
020
Microsoft Security Response Center @msrc.microsoft.com · 29/01/2026
You don’t pick the bugs. The bugs pick you.” Meet Wouter, Microsoft MVR and Zero Day Quest 2026 qualifier, and read his security research journey: www.microsoft.com/en-us/msrc/b... #ZeroDayQuest
Wouter wtm
000
Microsoft Security Response Center @msrc.microsoft.com · 23/01/2026
Kicking off the Call for Papers for BlueHat Redmond ⚽️ BlueHat brings together security researchers and responders to exchange ideas, experiences, and best practices. Bring your best ideas, because security is a team sport. Submit your paper by February 28, 2026: aka.ms/BH26CFP
023
Microsoft Security Response Center @msrc.microsoft.com · 21/01/2026
Save the date. Score a spot at BlueHat Redmond ⚽️ BlueHat Redmond is back and takes place May 5–6, 2026. Watch this space for details as we get closer to kickoff.
010
Microsoft Security Response Center @msrc.microsoft.com · 13/01/2026
Security updates for January 2026 are now available. Details are here: msft.it/6018SZEg0 #PatchTuesday #SecurityUpdateGuide
January 2026 Patch Tuesday
050