Cyber Security News

Microsoft Congratulates MSRC’s Most Valuable Security Researchers

Microsoft has officially announced its 2025 Most Valuable Security Researchers, recognizing the top 100 security researchers worldwide who have made significant contributions to protecting Microsoft customers through the Microsoft Security Response Center (MSRC) program. 

The recognition is based on a comprehensive point system that evaluates researchers’ valid vulnerability reports submitted between July 1, 2024, and June 30, 2025.

Key Takeaways
1. VictorV led with 2,977.5 points; wkai and Suresh Chelladurai followed in 2nd and 3rd.
2. Anonymous researchers took 4th and 8th, showing strong anonymous participation.
3. Notable individuals include Adnan (5th), Dhiral Patel (@dhiralpatel94) (6th), and the team of Nan Wang & Ziling Chen (7th).
4. 0x140ce (9th) and Azure Yang (10th) round out the top 10 for outstanding contributions.

The MSRC Researcher Recognition Program operates under Coordinated Vulnerability Disclosure (CVD) principles, providing a structured framework for security researchers to report vulnerabilities while maintaining responsible disclosure practices. 

This year’s top 10 researchers collectively earned 15,635 points, demonstrating exceptional dedication to cybersecurity research and vulnerability discovery.

Elite Researchers Lead Global Security Efforts

VictorV claimed the top position with an impressive 2,977.5 points, followed closely by wkai at 2,935 points. 

The third-place position went to Suresh Chelladurai with 2,092.5 points. The competitive nature of the program is evident in the close scoring between the top performers, with less than 50 points separating the first and second positions.

Anonymous researchers secured multiple spots in the top 10, highlighting the program’s inclusivity for researchers who prefer to maintain privacy while contributing to security research. 

Adnan ranked fifth with 1,285 points, while Dhiral Patel (@dhiralpatel94) earned the sixth position with 1,240 points. The collaborative effort of Nan Wang (@eternalsakura13) and Ziling Chen secured seventh place with 1,000 points.

The program’s point-based evaluation system considers multiple factors, including vulnerability severity, impact assessment, and technical complexity. 

Each valid vulnerability report undergoes rigorous evaluation by Microsoft’s security team, with points awarded based on the Common Vulnerability Scoring System (CVSS) and Microsoft’s internal risk assessment protocols.

Excellence Across Product Categories

Microsoft’s technical leaderboards showcase specialized expertise across key product areas, including Azure, Office, Windows, and Dynamics 365/Power Platform. 

These category-specific rankings recognize researchers who demonstrate deep technical knowledge in particular Microsoft ecosystems.

The Azure leaderboard features Suresh Chelladurai, Adnan, and an anonymous researcher, reflecting the critical importance of cloud security research. 

For Office products, 0x140ce, Haifei Li, and Guang Gong, Li Shuang, and willJ lead the rankings, demonstrating expertise in productivity suite security vulnerabilities.

Windows security research is dominated by wkai, VictorV, and another anonymous researcher, emphasizing the ongoing importance of operating system security. 

The Dynamics 365 and Power Platform category recognizes Dhiral Patel (@dhiralpatel94), Brad Schlintz (nmdhkr), and cjm00n with Kunlun Lab & Zhiniang Peng with HUST for their contributions to business application security.

The MVR badge system introduces three distinct achievement categories: Accuracy, Impact, and Volume. 

The Accuracy badge recognizes researchers maintaining 100% validity rates in their submissions, ensuring quality over quantity in vulnerability reporting. 

Impact badges are awarded to researchers whose average points per valid vulnerability report reach or exceed the 90th percentile, indicating high-severity findings.

Volume badges acknowledge researchers submitting at least five valid vulnerability reports, recognizing sustained contribution to the security research community. 

These achievements are displayed on Annual Technical Leaderboards and provide professional recognition for researchers’ specialized skills.

All 100 MVRs will receive exclusive MSRC swag boxes and digital badges for professional portfolios and social media sharing. 

The recognition extends beyond material rewards, establishing these researchers as trusted partners in Microsoft’s global security ecosystem. 

The program continues to strengthen the relationship between Microsoft and the security research community, fostering collaborative approaches to identifying and addressing security vulnerabilities across Microsoft’s expanding product portfolio.

Boost detection, reduce alert fatigue, accelerate response; all with an interactive sandbox built for security teams -> Try ANY.RUN Now 

Kaaviya

Kaaviya is a Security Editor and fellow reporter with Cyber Security News. She is covering various cyber security incidents happening in the Cyber Space.

Recent Posts

Hackers Target AI Infrastructure With RCE, Prompt Injection and API Key Theft

Hackers are actively probing AI systems, turning exposed gateways and agent tools into routes for…

2 hours ago

Hackers Make Phishing Pages Change Their Code Every Time Someone Opens Them

Hackers are making some phishing pages harder to track by changing the code delivered to…

3 hours ago

Iran-Linked Hackers Reportedly Knock UK Power Plant Offline for Four Days

A cyber incident reportedly forced a British power plant to halt operations for about four…

4 hours ago

Russian Hackers Use New HOOKEDGE Malware to Spy on European Defense and Diplomatic Targets

Russian hackers have used a new backdoor called HOOKEDGE to target defense manufacturers, government bodies,…

4 hours ago

Ransomware Gang Claims AI Can Analyze 700GB of Stolen Data Every Hour

TITAN ransomware is pairing file encryption with an ambitious claim: artificial intelligence that can sort…

4 hours ago

Hackers Compromise Hundreds of WordPress Sites to Deploy Amatera Stealer via ClickFix

A fake student resume is being used to place a remote-access tool on researchers’ Windows…

6 hours ago