IntegraXor, a manufacturer of supervisory control and data acquisition (SCADA) equipment, announced last week that it would implement a bug bounty program. The company claims their lowest payout is roughly the equivalent of $149 and their highest payout is just short of $4000. SCADA machines, particularly ones with remotely accessible human machine interfaces (HMI) are notoriously vulnerable to attack. The question is whether or not researchers will be at all interested in scouring the systems for bugs given the unusual payout method.
Source: https://threatpost.com/scada-vendor-offers-store-credit-for-vulnerabilities/101315/

