The iDefense Labs VCP Challenge considers all qualifying research submissions from December 1 of the prior year, through November 30 of the current calendar year. The Challenge will review all qualifying research accepted by the VCP Program where the contributor has accepted the iDefense VCP's offer of compensation for the submission during the Challenge period. Following the acceptance deadline the iDefense Labs Vulnerability Research Team (VRT) will determine the winners and award the prizes for the top four overall contributors to the iDefense Labs VCP and/or the top individual VCP submissions processed by iDefense within a calendar year. iDefense will announce and award the $50,000 Grand Prize and all other cash prizes within thirty (30) days of the Challenge deadline. Under no circumstances will any submission be considered for any of the current year's Challenge prizes if the contributor has not accepted the iDefense VCP's offer for compensation for the submission. iDefense reserves the right to modify the terms and conditions of the VCP Challenge at any time at its discretion.

Microsoft Corp. has released eight Security Bulletins encompassing 28 vulnerabilities. This report provides an initial summary of these pending issues.

Read more...

Microsoft Corp. has released two Security Bulletins encompassing four vulnerabilities. This report provides an initial summary of these pending issues.

Read more...

Microsoft Corp. has released 11 Security Bulletins encompassing 20 vulnerabilities. This report provides an initial summary of these pending issues.

Read more...

Prior to 2008, the old Challenge Program had awarded cash prizes for the best research submission targeting a specific technology over a 90 day period. Many iDefense VCP contributors had complained that 90 days was simply not enough time to properly research a good vulnerability, and informed the VCP that more time was needed. Recognizing that this was a fundamentally valid assertion, iDefense decided to ‘take the hint’ and restructure the entire iDefense VCP Challenge Program.

As of July 1, 2008 the new VCP Challenge Program takes effect, considering all qualifying research submissions through the end of the calendar year (31 December). Thereafter, the Challenge will consider all qualifying research accepted and compensated by the VCP Program that were received between the first day of January and the last day of December in each subsequent year. Following the acceptance deadline the iDefense Labs Vulnerability Research Team (VRT) will determine the winners and award the prizes. iDefense will award all cash prizes within thirty (30) days of the Challenge deadline. Under no circumstances will any submission be considered for any of the current year’s Challenge prizes if the contributor has not accepted the iDefense VCP’s offer for compensation for the submission.

Read more...