Google Pauses AI-Driven Bug Bounty Program

Google halted its open-source bug bounty program after an influx of low-quality, AI-generated vulnerability reports overwhelmed the review team.

The top 3

  1. Reason for Program Suspension: Google cited a 'significant rise' in irrelevant or automated submissions that diverted attention from genuine security threats.
  2. Impact on Security Researchers: Legitimate researchers face delays, with the company currently re-evaluating its triage processes to filter out AI-generated noise.
  3. Scope of the Freeze: The temporary hold specifically affects the Open Source Software (OSS) Vulnerability Reward Program while excluding core product bounty tracks.

Sources

Open the full topic