Google Opens $250K Bug Bounty Contest for VM Hypervisor

Google launched the kvmCTF vulnerability reward program to encourage researchers to find zero-day guest-to-host vulnerabilities in the KVM host kernel, offering tiered cash rewards (up to $250,000) for exploit outcomes such as arbitrary memory write/read and denial-of-service; the contest defines scope and rules (excluding QEMU and host-to-KVM techniques) and, as of the report, had no successful submissions.