search
OSS bug bounty program
Trends
- 1
Google has suspended its open-source bug bounty program, citing a flood of low-quality vulnerability reports generated with the help of AI tools. The company says the influx of automated, often duplicate or trivial submissions has overwhelmed reviewers, making it hard to identify genuine security issues. The move has sparked debate among security researchers about AI's growing impact on vulnerability disclosure.
- 2Google Pauses OSS Vulnerability Reward Program Over AI Reports●Google Pauses OSS VRP Vulnerability Search Over AI Reports
Google has paused part of its Open Source Vulnerability Reward Program (OSS VRP), halting vulnerability search activities after a wave of AI-generated reports. The company is said to be dealing with a flood of low-quality or automated findings produced by artificial intelligence tools, prompting a temporary stop while it reassesses how such submissions are handled.