Blaming a “vital rise” in AI submissions, Google has paused its open supply bug bounty program till subsequent yr.
Final yr, TechCrunch reported that cybersecurity experts were warning of that AI slop posed a serious risk to bug bounty programs. Appears to be like like that’s the problem confronting Google’s Open Supply Software program Vulnerability Rewards Program, the place researchers had been rewarded for locating vulnerabilities within the firm’s open supply software program.
In posts on X and the program website, Google stated the bug bounty program was paused as of October 1, with a promise to offer “an replace” within the first quarter of 2027. According to Tom’s Hardware, Google engineers and open supply maintainers had been overwhelmed by experiences that had been invalid or contained hallucinations.
“This pause is because of a big rise in automated submissions, the overwhelming majority of which aren’t legitimate,” the corporate stated.
Within the meantime, contributors are inspired to think about Google’s different bug bounty packages.
