Google pauses its open-source bug bounty program after increase in AI-generated submissions
Google paused its open-source vulnerability rewards program through the end of 2026, citing a significant increase in AI-related submissions.
Google said its Open Source Software Vulnerability Rewards Program was paused on October 1 and that it plans to provide an update in the first quarter of 2027.
TechCrunch reported that engineers and maintainers had been overwhelmed by invalid or hallucinated vulnerability reports.