Google pauses open-source bug bounty over AI-generated report surge
AI summary
Google has temporarily paused new vulnerability submissions to its Open Source Software Vulnerability Rewards Program after a surge of automated reports overwhelmed human reviewers. The company said the vast majority of these reports contained invalid information or hallucinated vulnerability data, while supply-chain and particularly dangerous flaw reports remain eligible under stated exceptions.
In-depth insight
The pause highlights how low-quality AI-generated security reports can increase review costs and slow vulnerability response in open-source projects.
GoogleGoogle Open Source Software Vulnerability Rewards ProgramGoogle Bug Hunters