DigiNews

Summary

GitHub announced a restructuring of its bug bounty program to prioritize high-quality security research. It introduces a permanent VIP program with higher payouts and faster responses, replaces the public bounty table with fixed payouts by severity, and adds a signal requirement to reduce noise. Backward-compatible handling keeps reports submitted before July 27, 2026 under the old rules.