Intel ups bug bounty programme reward to $250,000 in light of Meltdown and Spectre

The initiative is now open to the public to help uncover any side-channel vulnerability in its processors

Chip giant Intel has announced it will award up to $250,000 to any security researcher who uncovers a new side-channel vulnerability in its processors, up from $100,000.

The reward is part of the firm's updated bug bounty programme, which it has switched from an invitation-only initiative to a public one in a bid to prevent any future Meltdown and Spectre-type exploits.

Announcing the re-purposed bug bounty programme, Intel said it will also increase the amount it awards for the discovery (and confidential reporting) of general security vulnerabilities to $100,000.

"Coordinated disclosure is widely regarded as the best way to responsibly protect customers from security exploits. It minimises the risk that exploitable information becomes publicly known before mitigations are available," said Intel's VP and GM of platform security, Rick Echevarria.

Advertisement
Advertisement - Article continues below

Echevarria believes that this form of "responsible and coordinated disclosure" will increase the likelihood that users will have solutions available when security issues are first published.

"Our Bug Bounty Program supports this objective by creating a process whereby the security research community can inform us, directly and in a timely fashion, about potential exploits that its members discover," he added.

"We believe these changes will enable us to more broadly engage the security research community, and provide better incentives for coordinated response and disclosure that help protect our customers and their data."

Intel said it will continue to make updates to the Bug Bounty programme in the future, as needed, to make it as effective as possible.

It's no surprise Intel is doing all it can to prevent any future Meltdown and Spectre debacles from happening. The chip company is being taken to court over the vulnerabilities found in its processors earlier this year, with plaintiffs in California, Oregon and Indiana all taking legal action against the firm.

The Meltdown and Spectre flaws, which are present in the vast majority of modern processors, could allow hackers to break into the devices and steal sensitive data. However, no data breaches have been reported as yet, even though the vulnerabilities exist in the majority of processors dating from 1995. The flaw wasn't reported until June last year, despite Intel knowing about it since before then.

The lawyers representing the Californian claimants think there will be more cases coming to light in the coming months, describing it as "one of the largest security flaws ever facing the American public". They are urging Intel to fix the problem and to offer those affected compensation for any losses that have occurred.

Featured Resources

The IT Pro guide to Windows 10 migration

Everything you need to know for a successful transition

Download now

Managing security risk and compliance in a challenging landscape

How key technology partners grow with your organisation

Download now

Software-defined storage for dummies

Control storage costs, eliminate storage bottlenecks and solve storage management challenges

Download now

6 best practices for escaping ransomware

A complete guide to tackling ransomware attacks

Download now
Advertisement

Recommended

Visit/security/354156/google-confirms-android-cameras-can-be-hijacked-to-spy-on-you
Security

Google confirms Android cameras can be hijacked to spy on you

20 Nov 2019

Most Popular

Visit/security/identity-and-access-management-iam/354289/44-million-microsoft-customers-found-using
identity and access management (IAM)

44 million Microsoft customers found using compromised passwords

6 Dec 2019
Visit/cloud/microsoft-azure/354230/microsoft-not-amazon-is-going-to-win-the-cloud-wars
Microsoft Azure

Microsoft, not Amazon, is going to win the cloud wars

30 Nov 2019
Visit/operating-systems/microsoft-windows/354297/this-exploit-could-give-users-free-windows-7-updates
Microsoft Windows

This exploit could give users free Windows 7 updates beyond 2020

9 Dec 2019
Visit/hardware/354237/five-signs-that-its-time-to-retire-it-kit
Sponsored

Five signs that it’s time to retire IT kit

29 Nov 2019