Click any tag below to further narrow down your results
Links
Google froze its open source bug bounty program starting October 1 because AI-generated submissions overwhelmed the system with invalid reports and hallucinations. The company won't reopen it until Q1 2027.
- Google engineers and open source maintainers were flooded with automated submissions that were mostly invalid or contained AI hallucinations, making the program unmanageable.
- The pause confirms cybersecurity experts' earlier warnings that AI-generated content poses a real threat to bug bounty programs by degrading their signal-to-noise ratio.
- Google is redirecting participants to its other bug bounty programs while it figures out how to handle the AI submission problem.