Google has temporarily halted its Open Source Software Vulnerability Rewards Program, citing an unprecedented influx of artificial intelligence-generated vulnerability reports.
Google has temporarily halted its Open Source Software Vulnerability Rewards Program, citing an unprecedented influx of artificial intelligence-generated vulnerability reports. The pause took effect on October 1, with the company promising to resume the initiative in the first quarter of 2027 after refining its review process. Executives noted that the majority of submissions received during the program's operation were either technically invalid or contained fabricated details, overwhelming engineers and maintainers who previously relied on human-led testing. While the decision reflects growing concerns about AI's role in accelerating low-quality submissions, Google emphasized that the move does not signal a permanent discontinuation of its security incentives. In the interim, contributors are advised to explore alternative programs offered by the company. The situation underscores broader industry anxieties about AI's capacity to generate synthetic data at scale, potentially undermining the integrity of collaborative security efforts across technology ecosystems.
- Publisher
- techcrunch
- Reliability
- high
- Published
- 10/5/2026, 10:00:03 AM
- Retrieved
- 10/5/2026, 10:00:03 AM
- Relevance
- 80%
- Confidence
- 85%

