For the second year in a row, the vast majority of vulnerabilities — 92% — found in Intel’s products came from the company’s security investments, specifically internal research efforts and external bug bounties, the company stated in a new report, published today.
Of the 231 vulnerabilities reported in Intel products in 2020, 109 issues (47%) were found by Intel employees, while 105 (45%) were reported by external researchers participating in a bug-bounty program, according to the company’s “2020 Product Security” report. While the company did not detail how much it invested in the different programs, Intel did say the company paid out an average of $800,000 a year for bug bounties.
