Sony launches PlayStation bug bounty program

guest · Jun 24, 2020

PlayStation announces bug bounty program
Finding critical vulnerabilities on PlayStation 4 can earn security researchers $50,000
June 24, 2020
https://www.techradar.com/news/playstation-announces-bug-bounty-program

PlayStation has announced the launch of its public bug bounty program aimed at finding vulnerabilities on both the PlayStation 4 and PlayStation Network.

In a blog post, senior director of software engineering at SIE, Geoff Norton explained why the company has now decided to open its bug bounty program up to the public, saying:

“To date, we have been running our bug bounty program privately with some researchers. We recognize the valuable role that the research community plays in enhancing security, so we’re excited to announce our program for the broader community.”
Unlike Microsoft which launched its Xbox bounty program on its own earlier this year, PlayStation is partnering with the bug bounty platform HackerOne [...]
Click to expand...

PlayStation Bug Bounty program
PlayStation will pay security researchers to find low, medium, high and critical vulnerabilities on the PlayStation 4 and PlayStation Network.

According to the program's HackerOne page, finding vulnerabilities in the PlayStation Network will net researchers anywhere from $100 for low severity vulnerabilities and all the way up to $3,000 for critical vulnerabilities. PlayStation 4 vulnerabilities though could be much more profitable for researchers as the company will pay $500 for low severity vulnerabilities and all the way up to $50,000 for critical vulnerabilities.
Click to expand...

guest · Jul 10, 2020

Sony awards $10,000 bug bounty for PlayStation 4 kernel exploit
The WebKit sandbox can be abused to launch a remote attack to steal data or piracy
July 10, 2020
https://portswigger.net/daily-swig/sony-awards-10-000-bug-bounty-for-playstation-4-kernel-exploit

Sony has awarded a researcher $10,000 for disclosing a critical bug in the PlayStation 4 console that takes advantage of the WebKit browser engine.
The vulnerability, issued a severity score of 7-8.9, was disclosed on July 6 via the HackerOne bug bounty platform.
Kernel exploit
Reported by information security engineer Andy Nguyen, the bug in question impacts the PS4 kernel when paired with a WebKit exploit such as CVE-2018-4386 – a memory corruption issue which not only could be used to exploit the PS4, but other systems using the browser engine, including iOS, Safari, iTunes, and iCloud.
Closing the loophole
Sony was likely keen to patch this particular bug, as console owners could also potentially utilize it to homebrew their machines in order to run or emulate pirated games.
The vulnerability has now been patched by Sony in the PS4 system’s software version 7.50, released earlier this month.
Click to expand...

Log in or Sign up

Sony launches PlayStation bug bounty program

guest Guest

guest Guest

Log in or Sign up

Sony launches PlayStation bug bounty program

guest Guest

guest Guest

Useful Searches