bug bounty programs

Google has stopped accepting vulnerability reports for open-source software through its bug bounty program as of October 1. The company will temporarily no longer pay rewards for product flaws found in open-source projects, though reports on its own flagship products continue. The move is drawing attention in the security community, as the open-source incentive program was seen as an important way to support researchers auditing widely used projects.

Google has paused its open source bug bounty program following a sharp rise in submissions generated by artificial intelligence tools. The company says the volume of low-quality, AI-written reports has made the program difficult to manage, prompting a temporary halt while it reassesses how to handle the influx.

Google has paused its open-source bug bounty program, with reports linking the decision to a flood of low-quality, AI-generated submissions. The program paid researchers for finding vulnerabilities in Google's open-source projects, and the influx of trivial or fabricated reports appears to have made it harder to identify genuine security flaws. Security watchers say the move highlights how generative AI tools are straining vulnerability disclosure programs across the industry.

Google has suspended its open source bug bounty program, citing a significant rise in AI-generated vulnerability submissions. The company says many of the reports flooding in are low-quality, machine-written findings that take up valuable reviewer time without adding real security value. The move has sparked debate among security researchers about the impact of automated tools on responsible disclosure programs and how bounty platforms should handle AI-created noise.

Google has suspended its open-source bug bounty program, citing a surge of vulnerability reports generated by AI tools. According to Infosecurity Magazine, the company said low-quality, automated submissions have overwhelmed reviewers, making the program unsustainable in its current form. Security researchers are debating whether AI-generated reports are diluting bug bounty programs across the industry and how platforms should filter them.

Google has temporarily stopped accepting product vulnerability reports under its bug bounty program for open-source software as of October 1st. The pause means security researchers can no longer submit findings for Google open-source projects for the time being. The company has not fully explained the reasons, and observers are watching whether the program will resume and what the move means for open-source security research.

Google has paused its open source bug bounty program, citing a surge of submissions generated by AI tools. Low-quality automated reports are reportedly overwhelming reviewers, prompting the company to halt new submissions while it reassesses how to handle the influx. Security researchers are watching closely, as the decision raises broader concerns about AI-generated spam affecting vulnerability disclosure programs.

Google has paused part of its bug bounty program, a move that security commentators say underscores the difficulty of triaging the growing volume of vulnerability reports tied to artificial intelligence systems. The pause highlights how AI-related flaws are straining traditional disclosure workflows, with researchers and defenders debating how companies should prioritise and reward AI security findings.

Google is pausing a lucrative bug bounty program that rewarded security researchers for finding flaws. Reporting indicates the decision relates to shortcomings in how AI handles vulnerability assessment, raising questions about relying on artificial intelligence for security work. Observers are weighing what the pause means for the broader bug bounty ecosystem and for trust in AI-driven security tooling.

Google has paused its open source bug bounty program after being overwhelmed by a wave of AI-generated vulnerability reports. The automated submissions have flooded reviewers with low-quality, often invalid findings, making the program difficult to manage. The move highlights a growing problem for security teams as generative AI tools make it easy to mass-produce bug reports that look plausible but waste researchers' time.