The participant companies' principles include not helping any government mount a cyberattack against "innocent civilians and enterprises."

Inflated bounties might be creating perverse incentives for young cybersecurity researchers and distorting the market for white-hat bug hunters.

"We want our airmen transitioning from running email and boxes to focusing on cyber defense," one official said.

Recorded Future found that cybercriminals exploited PowerPoint the most in 2017 to steal money and information.

The exploits, and money, are flying in Vancouver.

A new measure will keep Chinese researchers from their usual Pwn2Own domination.