← Back to Feed

Google halts open-source bug bounty program amid AI spam surge

October 5, 2026 · BleepingComputer · Severity: HIGH

Google has paused its open-source bug bounty program because of a surge in AI-generated spam reports that overwhelmed the review process. The company aims to reassess submission guidelines to filter out automated junk. 📌 **Analyst Note:** This trend signals that AI-generated noise is becoming a significant operational burden for security programs; platforms may need to implement stronger verification or CAPTCHA-like measures.

Key Takeaways

  • Google suspended its Open Source Software Vulnerability Rewards Program after being overwhelmed by AI-generated spam submissions that flooded the review queue.
  • The flood of low-quality automated reports made it difficult for security teams to identify legitimate vulnerabilities, prompting a temporary halt to the program.
  • This move reflects a growing challenge for bug bounty programs as AI tools enable mass submission of irrelevant or fake reports, straining human resources.
☕ Buy a Coffee