Google Pauses Open-Source Bug Bounty Due to AI Submissions
Google has temporarily paused its open-source bug bounty program, OSS VRP, due to a surge in invalid submissions attributed to AI-generated content. The company stated that the majority of these reports are not valid and have disrupted the effectiveness of the initiative. This pause is expected to last until at least next year. The issue appears widespread; Linux has also reported similar challenges with an increase in low-quality bug reports from AI tools. Google's decision highlights growing concerns about how AI-generated content impacts software security practices, particularly open-source vulnerability reporting systems that rely on accurate and actionable data for effective patching and mitigation strategies.
Tickers: $GOOGL