Russia Launches Bug Bounty Program for Smart Device Security

Sberbank invites researchers to find vulnerabilities in popular smart speakers and set-top boxes, with rewards of up to $2,800.

Russia has introduced a new bug bounty program aimed at identifying vulnerabilities in smart devices. Sberbank is launching the Sber IoT Bug Bounty through the Bi.Zone Bug Bounty platform. Participants are tasked with probing the security of Sber-branded smart speakers and streaming devices, as reported by CNews.

Researchers can earn rewards of up to 250,000 rubles (approximately $2,800), depending on the severity of the discovered vulnerabilities.

The program includes several models available for review: SberBoom, SberBoom Mini 2, SberBoom Home, SberBox, SberBox Top, SberBox Time, SberBox 2, and the Sber Portal.

By crowdsourcing cybersecurity efforts, Sberbank aims to improve the safety of its products, which are used by millions. The program is open to both seasoned security experts and aspiring bug hunters, provided they are registered on the Bi.Zone Bug Bounty platform.

All submitted reports will be evaluated individually. Detailed bug descriptions will help ensure the most effective vulnerability assessments