Google Pauses Bug Bounty Program Over AI Spam

Google has paused its Open Source Software Vulnerability Rewards Program as of October 1, citing a significant rise in automated AI submissions, the vast majority of which were invalid. Google engineers and open source maintainers were overwhelmed by reports containing hallucinations or invalid findings. The company promises an update in the first quarter of 2027. In the meantime, Google is directing participants to its other active bug bounty programs.