Google Halts Open Source Bug Bounty Program Amid AI Submission Surge

Google has temporarily suspended its open source bug bounty program, citing a "significant rise" in submissions that are largely composed of AI-generated content. The company has observed that a substantial portion of the submitted vulnerabilities are not genuine but rather appear to be automatically generated by artificial intelligence tools.

This influx of AI-generated submissions has reportedly overwhelmed the program's capacity to effectively review and validate genuine security flaws. The decision to pause the program underscores a growing challenge for security researchers and platforms: distinguishing between authentic vulnerability reports and those produced by AI, which often lack the depth and accuracy required for effective remediation. The pause will allow Google to reassess its approach to handling submissions in the evolving landscape of AI-assisted security research.