Microsoft paid a record $17 million this year to 344 security researchers across 59 countries through its bug bounty program.