Google Halts Bug Bounty as AI Slop Floods In

🔥 What happened Google froze its Open Source Software Vulnerability Rewards Program on October 1. The reason: a surge of automated AI submissions, most of them invalid or hallucinated. An update is promised for Q1 2027. 💡 Why it matters Security experts warned last year that AI slop could wreck bug bounties. Now Google is the first major victim: maintainers drown in fake reports instead of fixing real flaws. That’s a direct threat to open source security. ⚡ Our take Unleashing AI agents on bug bounties doesn’t scale—it breaks the system that keeps open source safe. Google’s pause isn’t collateral damage; it’s a warning shot. Without human validation, AI becomes a spam amplifier.