Blaming a “vital rise” in AI submissions, Google has paused its open supply bug bounty program till subsequent 12 months.
Final 12 months, TechCrunch reported that cybersecurity specialists had been warning of that AI slop posed a severe threat to bug bounty applications. Appears to be like like that’s the difficulty confronting Google’s Open Supply Software program Vulnerability Rewards Program, the place researchers had been rewarded for locating vulnerabilities within the firm’s open supply software program.
In posts on X and this system web site, Google mentioned the bug bounty program was paused as of October 1, with a promise to supply “an replace” within the first quarter of 2027. In line with Tom’s {Hardware}, Google engineers and open supply maintainers had been overwhelmed by experiences that had been invalid or contained hallucinations.
“This pause is because of a big rise in automated submissions, the overwhelming majority of which aren’t legitimate,” the corporate mentioned.
Within the meantime, contributors are inspired to think about Google’s different bug bounty applications.
