Google pauses open-source bug bounty program citing surge in AI-generated submissions
The company’s Open Source Software Vulnerability Rewards Program was halted October 1 due to an influx of automated, often invalid reports, with no restart date specified.
1 source · cross-referenced
- Google paused its open-source bug bounty program on October 1, citing a significant rise in AI-generated submissions that overwhelmed maintainers.
- The company stated most automated reports were invalid or contained hallucinations, prompting the temporary freeze until at least early 2027.
- Participants are directed to Google’s other bug bounty programs while the open-source track remains inactive.
Google said it paused its Open Source Software Vulnerability Rewards Program on October 1 due to a significant rise in automated submissions, the vast majority of which were not valid.
The company attributed the surge to AI-generated reports, many of which contained hallucinations or lacked actionable details, overwhelming maintainers and engineers.
Google did not specify a restart date but said it would provide an update in the first quarter of 2027.
Participants in the program were directed to consider Google’s other bug bounty programs while the open-source track remained inactive.
The pause follows prior warnings from cybersecurity experts about the risks AI-generated submissions pose to bug bounty ecosystems.
- Oct 14, 2026 · TechCrunch — AI
Science Corporation implants vision-restoring PRIMA chip in first Stargardt disease patient
Trust78 - Oct 13, 2026 · TechCrunch — AI
Flox Intelligence raises $5M and launches edge AI devices to deter wildlife from critical infrastructure
Trust79 - Oct 13, 2026 · Hugging Face
Hugging Face releases LFM2.5-24B-A2B, a 24B-parameter reasoning agent with 2B active parameters for on-device use
Trust79