Google is now offering up to $1.5 million for advanced zero-click Pixel hacks targeting the Titan M2 security chip.
Meanwhile, Google is slashing payouts for basic Android and Chrome vulnerabilities and cutting several bonus categories.
Researchers can still earn up to $250,000 for full-chain Chrome exploits, and the MiraclePtr bonus remains untouched.
Google is cutting rewards for simple Android and Chrome exploits, but is offering a huge $1.5 million bounty to anyone who can achieve a zero-click, permanent hack of a Pixel’s Titan M2 chip.
In a new update to its Android and Chrome Vulnerability Reward Programs (VRPs), Google announced that it’s reworking payouts to focus less on lower-impact reports and more on complex bugs that could seriously affect users. The changes are already live.