Google pauses open source bug bounty program after AI submission surge

Google has suspended its Open Source Software Vulnerability Rewards Program after experiencing a massive surge in AI-generated vulnerability submissions.

FTMQ Creators, written by our newsroom5 October 2026 at 01:030 views

Google paused its Open Source Software Vulnerability Rewards Program on October 1, 2026, TechCrunch reported. The company halted the initiative after receiving a significant rise in AI-generated submissions. TechCrunch noted that cybersecurity experts previously warned that automated AI slop posed a threat to reward systems. [1]

The program paid security researchers for identifying vulnerabilities across the open source software supported by Google. According to Tom's Hardware, cited by TechCrunch, the volume of low-quality reports placed a burden on Google engineers and open source maintainers who review the submissions. [1]

Google announced the pause through posts on X and on the official program website, TechCrunch reported. The company committed to providing an update on the status of the program in the first quarter of 2027. [1]

Google paused its Open Source Software Vulnerability Rewards Program on October 1, 2026.
The suspension was caused by a significant rise in AI-generated vulnerability submissions.
Google plans to provide an update on the program in the first quarter of 2027.

Sources

Every paragraph above points to the numbered items it rests on. Read the originals here.

[1]Google froze its open source bug bounty program due to a ‘significant rise’ in AI submissionsTechCrunch, 4h ago (the report this story comes from)

Background

[2]PayPal on Wikipedia
[3]Google on Grokipedia

Our newsroom writes these reports with the help of software, from the 3 sources listed and nothing else, and checks them against those sources. Facts can still be wrong or move on; the originals are the record. Spotted a mistake? Write to daniel@monsterkong.com.

Get the day in one email

Reports like this one, the top news of the last 24 hours, every morning. Free, one email a day; readers can comment under every report.

By signing up you agree to our terms and privacy policy. Unsubscribe any time.

Comments

Join the conversation

Comments are open to readers of our daily email: the top news of the last 24 hours, every morning, free. Sign up and the comment box opens.

Already on the list? Enter the same address and we will send a sign-in link.