$4.5 Million Offered in New Cloud Hacking Competition

Wiz has teamed up with Microsoft, Google and AWS to launch Zeroday[.]Cloud, a cloud security hacking competition offering a total of $4.5 million in bug bounties. Security researchers must submit entries by 1 December and will demonstrate their exploits live on stage at Black Hat Europe in London on 10–11 December.

The contest covers six categories, including AI where prizes range from $25,000 to $40,000 for exploits against products such as Ollama, vLLM, and Nvidia Container Toolkit, and in the Kubernetes and cloud native category prizes go from $10,000 to $80,000 for issues affecting the Kubernetes API Server, Kubelet Server, Grafana, Prometheus and Fluent Bit.

Other categories include containers and virtualization, web server with up to $300,000 for Nginx exploits, and unauthenticated RCE rewards of up to $100,000 for Redis, PostgreSQL and MariaDB. The initiative has sparked controversy, with Trend Micro’s ZDI accusing Wiz of copying some rules, while Google’s plan to acquire Wiz was also noted.