-



Netgear launches Bug Bounty Program for Hacker; Offering up to $15,000 in Rewards

           Netgear launched on Thursday a bug bounty program to offer up to $15,000 in rewards to hackers who will find security flaws in its products.
Since criminals have taken aim at a rapidly growing threat surface created by millions of new Internet of things (IoT) devices, it has become crucial to protect routers that contain the keys to the kingdom that connects the outside world to the IP networks that run these connected devices.

To combat this issue, Netgear, one of the biggest networking equipment providers in the world, has launched a bug bounty program focusing on its products, particularly routers, wireless security cameras and mesh Wi-Fi systems.
Bug bounty programs are cash rewards given by companies or organizations to white hat hackers and researchers who hunt for serious security vulnerabilities in their website or products and then responsibly disclose for the patch release.
Also Read: How Hackers Hack Bank Accounts with Router Vulnerabilities
Bug bounties are designed to encourage security researchers, hackers and enthusiasts to responsibly report the vulnerabilities they discovered, rather than selling or exploiting it.
On Thursday, Netgear announced that the company has partnered up with Bugcrowd to launch Netgear Responsible Disclosure Program that can earn researchers cash rewards ranging from $150 to $15,000 for finding and responsibly reporting security vulnerabilities in its hardware, APIs, and the mobile apps.
Meanwhile, on the same day, The Federal Trade Commission (FTC) filed a lawsuit against D-Link, another large networking equipment providers, arguing that the company failed to implement necessary security protection in its routers and Internet-connected security cameras that left "thousands of consumers at risk" to hacking attacks.

If you are a bug bounty hunter, you should read all terms and conditions before shooting your exploits against Netgear products or website.
One of them explicitly mentioned, "You may only exploit, investigate, or target security bugs against your own accounts and/or your own devices. Testing must not violate any law, or disrupt or compromise any data or access data that is not yours; intentional access of customer data other than your own is prohibited."
The company is paying out up to $15,000 for each vulnerability. The highest bounty will be given for the flaws that would allow access to the cloud storage video files or live video feeds of all its customers, and bugs that allow remote access to routers from the Internet, as shown in the chart above.

 

Comments

Post a Comment

Popular posts from this blog

Best April Fools' Day 2017 Pranks in the Tech World

-
Image
It's April 1, and everyone knows it's April Fools' Day when no one's going to believe in whatsoever you may scream. But when it comes to some reputed and trusted tech companies, they easily get into people's minds with their 'new and latest offerings'. These, in most cases, would be hoax or joke offerings - those that will never exist, or those that will be available for a very short time just for laughs. Even before April 1, these companies start pushing their stories to goof around with you - with little teasers, such as the Dash Charge  announcement  that OnePlus had teased, before making briefly  available  the Dash Energy drink in select outlets Here are 2017's April Fools' tech pranks - the gimmicks, goofs, and pranks that companies decided to plan on us. Some are funny, some inane, and some lame. 1. Google Google  has always been on the frontier of people, with quirky innovations that usually get people believe it. It has some bizarre-
Read more

Artesian Joins Hands with Microsoft and Innervate

-
Image
Artesian Solutions, an artificial intelligence-driven relationship intelligence service, has announced a new strategic channel partnership with Microsoft and Innervate Technology Solutions that will help financial service organizations boost their investment in Microsoft Dynamics 365. The Artesian-Microsoft Dynamics 365 integration allows businesses to boost their CRM investment by enhancing mission-critical data with real-time news, people insights, and social media. The integration provides deep and actionable insights to customer-facing teams, thus allowing them to better understand their customers’ needs. And this, in turn, makes certain that they never miss the chance perhaps to strike a conversation or get a high ground in reference to their most big-ticket patrons. Andrew Yates, CEO, Artesian, said , “This partnership between Artesian, Microsoft and Innervate is a fantastic example of leading vendors in B2B software transformation coming together to bring
Read more
-
Experience the Front Row in In Current VR technology most commonly uses virtual reality headsets or multi-projected environments, sometimes in combination with physical environments or props, to generate realistic images, sounds and other sensations that simulate a user's physical presence in a virtual or imaginary environment. A person using virtual reality equipment is able to "look around" the artificial world, move around in it, and interact with virtual features or items. The effect is commonly created by VR headsets consisting of a head-mounted display with a small screen in front of the eyes, but can also be created through specially designed rooms with multiple large screens. The Virtual Reality Modelling Language (VRML), first introduced in 1994, was intended for the development of "virtual worlds" without dependency on headsets. The Web3D consortium was subsequently founded in 1997 for the development of industry standards for we
Read more