Google Pauses Open-Source Bug Bounty Program After Flood of Invalid AI-Generated Reports
Google has temporarily stopped accepting new product vulnerability reports through its Open Source Software Vulnerability Reward Program(OSS VRP) following a major increase in automated submissions that were mostly invalid. The change took effect on October 1, 2026, and Google said it will provide...