# Google adds $250,000 reward for cloud takeover vulnerabilities

_Published Tuesday, November 3, 2026 at 8:25 AM EST · Security · Latest · Tier 2 — Notable_

![Google adds $250,000 reward for cloud takeover vulnerabilities — Primary](https://www.bleepstatic.com/content/hl-images/2026/11/03/Google-headpic.jpg)

Google has added a $250,000 reward for vulnerabilities that let attackers gain full administrative control over arbitrary Google Cloud organizations or projects. The new Cloud Vulnerability Reward Program tier starts this month and covers flaws such as failures to isolate customers and complex logic errors across services.

Qualifying exploits cannot require prior access, compromised credentials, social engineering or user interaction. Researchers must use a designated service account to prove unauthorized access rather than test against real customer projects. Anyone who achieves execution on Google's production infrastructure must stop probing; further escalation, credential collection or movement through production systems leads to disqualification.

## Sources

- [BleepingComputer](https://www.bleepingcomputer.com/news/google/google-adds-new-250-000-cloud-vrp-reward-for-root-in-cloud-bugs/)

---
Canonical: https://techandbusiness.org/newswire/nxETVWmYof2NzgW3wge6nd
Published: 2026-11-03T13:25:29.344Z
Story chronology: 2026-11-03T12:05:52.000Z
Retrieved: 2026-11-03T16:05:00.511Z
Publisher: Tech & Business (techandbusiness.org)