
Google pauses its open-source bug bounty after a flood of mostly invalid AI-generated reports
The Open Source Software Vulnerability Rewards Program stopped taking product vulnerability reports on October 1, and Google says it will give an update in the first quarter of 2027.






