What happened
Google paused its Open Source Software Vulnerability Rewards Program as of October 1, citing a 'significant rise' in automated AI submissions, most of which are invalid. It promises an update in the first quarter of 2027.
Why it matters
Researchers and maintainers were overwhelmed by invalid or hallucinated reports, making the program hard to run. Participants are being directed to Google's other bug bounty programs.
What to watch
The pause hinges on whether Google can filter out AI-generated noise before reopening; the promised update in the first quarter of 2027 is the next signal.
WHO IT HITSOpen source maintainers and security researchers who relied on this program now face a pause in rewards and a likely shift to Google's other bounty programs.
Summaries like this, in your inbox every morning.
Google's Open Source Software Vulnerability Rewards Program rewarded researchers for finding vulnerabilities in the company's open source software. The pause, effective October 1, follows earlier warnings from cybersecurity experts that AI slop posed a serious risk to bug bounty programs. According to Tom's Hardware, Google engineers and open source maintainers were overwhelmed by reports that were invalid or contained hallucinations. The company said the vast majority of automated submissions were not valid. While the program is paused, Google is pointing participants to its other bug bounty programs. The stakes for Google and the open source community hinge on whether the company can devise a way to filter out AI-generated noise before reopening the program; the promised update in the first quarter of 2027 is likely to be the next indication of its plans.
Pick your industry and the AI tools you use, and get news related to your work every day.
Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →
Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.
Apple and Meta said they would jointly release a new open-weight AI model designed to run on high-end Macs, ai…
A Zenn contributor sorted AI use into three modes — AI as an assistant, AI running alongside people, and AI th…
A developer released agent-guardrails, a one-script Python standard-library plugin that guards Bash, Write, Ed…
A Qiita article compared automated red-teaming methods for LLM apps — GCG, PAIR, and TAP — using mock implemen…
Liquid AI released d1-ultra on October 15, 2026, an upgraded open-weights decision model that averaged 76.7 ac…
In a webinar hosted by French Mathematical Society president Isabelle Gallagher, Fields Medal winner Hugo Dumi…
