Bug Bounty Program

Google pauses open source bug bounty program over flood of AI-generated submissions

Google has suspended its Open Source Software Vulnerability Rewards Program as of October 1, citing a sharp increase in automated submissions, most of which were invalid. The company said it plans to provide an update in the first quarter of 2027 and is directing researchers to its other bug bounty programs in the meantime.

techcrunch.com · 2026-10-04

Intel suspends paid bug bounty program, replaces it with unpaid Intigriti disclosure

Intel has stopped its long-running bug bounty program that paid researchers up to $100,000 per vulnerability, replacing it with a new Intigriti-hosted disclosure process that offers no financial rewards. The bounty board remains visible but is marked as suspended, and Intel has not publicly explained the decision. The program had run since 2017 and accounted for roughly 105 of 231 CVEs Intel patched in 2020.

tomshardware.com · 2026-09-19