Microsoft has disclosed the results of its bug bounty program, including the fact that it paid $13.6 million in bounties over the last year.