Blaming a “significant rise” in AI submissions, Google has paused its open source bug bounty program until next year.
Last year, TechCrunch reported that cybersecurity experts were warning of that AI slop posed a serious risk to bug bounty programs. Looks like that’s the issue confronting Google’s Open Source Software Vulnerability Rewards Program, where researchers were rewarded for finding vulnerabilities in the company’s open source software.
In posts on X and the program website, Google said the bug bounty program was paused as of October 1, with a promise to provide “an update” in the first quarter of 2027. According to Tom’s Hardware, Google engineers and open source maintainers were overwhelmed by reports that were invalid or contained hallucinations.
“This pause is due to a significant rise in automated submissions, the vast majority of which are not valid,” the company said.
In the meantime, participants are encouraged to consider Google’s other bug bounty programs.
By Allen Kwabena Frimpong. Allen Kwabena Frimpong explores how the current creative industrial complex’s autocratic…
Everything is a new test for the New York Rangers as we wait and see…
BLOOM seeks to cut costs by helping financial institutions coordinate cross-border use of stablecoins and…
The husband-and-wife film-making team behind Wicker, Alex Huston Fischer and Eleanor Wilson, tell the BBC…
The school day may be over, but the miles keep adding up. Between the daily…
Photo: Adam Rose/Everett Collection Raise your glass, Disney ordered a new Glee revival series on…