Google has paused its open source bug bounty program until next year due to a significant rise in AI-generated submissions, based on information published by TechCrunch.
The program, which rewarded researchers for finding vulnerabilities in Google's open source software, was suspended on October 1. Google cited a substantial increase in automated submissions, with the vast majority deemed invalid.
This influx reportedly overwhelmed engineers and maintainers with reports containing hallucinations. Cybersecurity experts had previously warned that AI-generated content posed a risk to bug bounty programs. Google has stated it will provide an update in the first quarter of 2027 and encourages participants to explore its other bug bounty initiatives in the interim.
Source: TechCrunch
