Google paused its open-source bug bounty after a flood of AI reports.
Google stopped taking product flaw reports into its open-source bug bounty on 1 October. It blamed an influx of AI-written reports that look convincing and describe bugs nobody can reproduce. The pause runs until at least early 2027, though supply chain reports still go through.
Why it mattersThe cheapest way to look useful in security is now to generate a report. That cost lands on the volunteers who keep the code you depend on.
Read in the app — free, in 9 languages
Related stories
Apple is locking down the Mac permission that AI agents ask for.2026-10-04Anthropic is paying to train 10,000 engineers to deploy Claude.
2026-10-04Broadcom will lend Anthropic the money to rent Broadcom's chips.
2026-10-04Amazon offered a billion dollars to towns fighting its data centres.
2026-10-04DeepSeek gave away the software that loosens Nvidia's grip.
2026-10-04