Any dodgy code affecting Microsoft's products and services will now be covered under the 'In Scope by Default' bug bounty program.