AI Spam Surge Forced Google to Halt Its Open-Source Bug Bounty Program

Google suspended submissions to its open-source vulnerability rewards program after being flooded by AI-generated reports, the vast majority not valid. Curl killed its HackerOne bounty in January for the same reason, and Intel pulled its cash rewards in September. The bots didn't find the bugs, they just buried the humans who do.