Amman, Jordan – Samsung Electronics Co., Ltd has announced significant enhancements to its Mobile Security Rewards Program, raising the maximum reward to $1 million for eligible security vulnerability reports from the external security community. This move is part of Samsung’s continuous effort to promote transparency and collaboration in mobile security. The program’s criteria have been updated in the Samsung Mobile Security Risk Classification, which now includes additional classification factors to better assess vulnerabilities.
In addition, Samsung published its first Annual Rewards Program Report, highlighting the program’s achievements and underscoring the critical role played by its participants. The Mobile Security Rewards Program is aligned with Samsung’s commitment to providing up to seven years of security updates, further emphasizing the company’s focus on protecting user data and device safety.
“Cybersecurity attacks are becoming increasingly sophisticated and harder to detect. We actively encourage the security community to participate in identifying these threats,” said Justin Choi, Corporate VP & Head of Security Team, Mobile eXperience Business at Samsung Electronics. “Their support is vital in ensuring continuous monitoring of our products, helping us enhance the protection of our customers. It is crucial that user data and information are kept safe, and we prioritize security in all our products and services.”
Launched in 2017, the program reflects Samsung’s commitment to openness and collaboration with global cybersecurity experts, ethical hackers, and independent security professionals. Through a systematic and proactive approach, the program identifies and addresses potential vulnerabilities, strengthening the security of users’ mobile experiences.
The newly introduced Important Scenario Vulnerability Program is central to the $1 million reward initiative. This program focuses on high-impact vulnerabilities, such as arbitrary code execution on privileged targets, device unlocking, full user data extraction, and bypassing device protection solutions. By working closely with the security community, Samsung accelerates the detection and resolution of critical threats, further reinforcing its dedication to transparency and collaboration in managing emerging risks.
Enhanced Transparency in Reward Criteria
The Samsung Mobile Security Risk Classification now offers a more detailed, publicly accessible system for categorizing vulnerabilities. It includes new factors, such as downgrade considerations, which allow a threat’s severity to be lowered, and an ineligible classification for minimal threats. The classification system assigns severity levels across five categories: Critical, High, Moderate, Low, and Ineligible/Low Security Impact, providing clear guidance for participants and the broader security community.
The program applies to all Samsung mobile devices that receive monthly, quarterly, and biannual security updates. Additionally, the program extends to eligible submissions for potential vulnerabilities in services like Bixby, Samsung Account, and Samsung Wallet.
Samsung’s Inaugural Rewards Program Report
In August 2024, Samsung released its first Annual Rewards Program Report, summarizing key achievements since the program’s inception in 2017. In 2023, Samsung awarded over $800,000 to 113 researchers, bringing the total rewards paid out to more than $4 million globally. This underscores the vital contributions of the security community in enhancing mobile security.
The Mobile Security Rewards Program is effective immediately. For more information, including terms and conditions, visit the Samsung Mobile Security page.
About Samsung Electronics Co., Ltd.
Samsung is a global leader in transformative ideas and technologies, redefining industries like TVs, smartphones, wearables, tablets, home appliances, network systems, and memory solutions. Through its SmartThings ecosystem, Samsung delivers a seamless connected experience, and the company continues to innovate through open collaborations with partners. For the latest news, visit the Samsung Newsroom at news.samsung.com.
