Microsoft Security Response Center

We are the Microsoft Security Response Center. To report security vulnerabilities or abuse in Microsoft products, visit

[Microsoft Security Response Center @msftsecresponse]

Microsoft has taken steps to protect customers following an issue involving eMudhra certificate authority keys. Learn about the protections in place and recommended actions for customers: https://t.co/nBvmb1YMb1

[Microsoft Security Response Center @msftsecresponse]

@shreerajaput Congrats! We appreciate the kind words but all the hard work was on your part, and we truly appreciate it.

[Microsoft Security Response Center @msftsecresponse]

@bl4cksku111 Nice work, Jose! 🎉

[Microsoft Security Response Center @msftsecresponse]

We’re updating the Microsoft 365 Bounty Program to make program scope clearer for researchers.

One of the biggest changes: we’re shifting from domains to services, making it easier to understand which Microsoft 365 services are included in the program and how eligible research maps to them.

Learn more about the updates: https://t.co/GuUXwGRb31

[Microsoft Security Response Center @msftsecresponse]

@KeyZ3r0 Congrats! What a collection. Thanks for all your contributions, let's keep adding more coins!

[Microsoft Security Response Center @msftsecresponse]

@JeffRich883 Hi Jeff: Please send us a DM so that we can look into this.

[Microsoft Security Response Center @msftsecresponse]

@Archie_1997 Hey Archie, we're interested to hear more about what you found. Could you send us a DM?

[Microsoft Security Response Center @msftsecresponse]

Security researchers play an essential role in helping Microsoft protect customers, and we appreciate the time and expertise that goes into every vulnerability report.

Many researchers already provide the detailed, actionable reports our teams need to reproduce and assess vulnerabilities quickly. Starting October 20, Microsoft bounty programs will use Complete and Not Complete report assessments to make those expectations clearer and help provide more predictable bounty awards.

Learn what makes a report Complete and how to prepare your next submission in our blog: https://t.co/T6aSeFeQyt

[Microsoft Security Response Center @msftsecresponse]

@paxmanam We still appreciate all your efforts! Thanks for submitting your research and we're looking forward to your next reports.

[Microsoft Security Response Center @msftsecresponse]

@m0nd2y Incredible work! Thanks for all the time and effort that went into this. 🎉

[Microsoft Security Response Center @msftsecresponse]

@SecBoxer Congratulations @SecBoxer! Great work 🔥

[Microsoft Security Response Center @msftsecresponse]

@0xTeles @bsysop Congratulations @0xTeles and @bsysop 🔥

[Microsoft Security Response Center @msftsecresponse]

@ReinDaelman Congrats, Rein! Thanks for all the hard work and collaboration with our team. We're excited to see what's next!

[Microsoft Security Response Center @msftsecresponse]

@clearbluejar Congrats, Josh! 🔥

[Microsoft Security Response Center @msftsecresponse]

@ott3rly Congrats, Mantas! 🎉 Thanks for all your hard work.

[Microsoft Security Response Center @msftsecresponse]

@X_cryptographer Hi there! We always recommend submiting a report so the team can give a full investigation: https://t.co/XEumJPNut1

[Microsoft Security Response Center @msftsecresponse]

@M4x_1997 Incredible work, Aobo! Major congrats. Thanks for all the effort you put into this research.

[Microsoft Security Response Center @msftsecresponse]

@renyidudumen Well done! We appreciate all the hard work that went into this.

[Microsoft Security Response Center @msftsecresponse]

@R1s666 Congrats! Thanks for all your contributions to the security of our customers.

[Microsoft Security Response Center @msftsecresponse]

@heegong123 You're on a roll! Thanks for all the hard work, HeeChan!