GoKawiilGoogle halts open-source bug bounty program amid AI-generated report overload
Google has temporarily suspended its Open Source Software Vulnerability Rewards Program (OSS VRP) due to an overwhelming influx of automated, AI-generated vulnerability reports. The company cited a majority of these submissions as invalid or hallucinated, straining reviewer resources. The pause, effective October 1, affects new submissions, with plans to update the program's structure by early 2027.