GoKawiilGoogle pauses product-vulnerability reports in OSS bug bounty program
Google suspended product vulnerability submissions to its Open Source Software Vulnerability Reward Program as of October 1, citing a surge of invalid, AI-generated reports. The company said supply chain reports and Google Cloud VRP submissions are unaffected, and it plans to provide an update on the program by early 2027 while it reworks the process.