{
  "id": 11676963,
  "title": "Google freezes open-source bug bounty program amid flood of invalid AI slop submissions",
  "url": "https://urgent.news/2026/10/03/google-freezes-open-source-bug-bounty-program-amid-flood-of-invalid",
  "topic": "ai",
  "section": "AI",
  "published": "2026-10-03T12:00:00.000Z",
  "source": {
    "name": "Tom's Hardware",
    "slug": "tom-s-hardware",
    "url": "https://www.tomshardware.com/tech-industry/artificial-intelligence/google-suspends-part-of-the-oss-vrp-bug-bounty-program-due-to-an-influx-of-invalid-ai-submissions-product-vulnerability-submissions-ended-october-1"
  },
  "original_language": "en",
  "account": "Google has temporarily halted its Open Source Software Vulnerability Reward Program (OSS VRP) due to a massive surge in invalid bug reports generated by artificial intelligence. The company announced the suspension on X on October 1, urging participants to explore other VRP programs and promising to provide an update by the first quarter of 2027. The issue arose as large language models and automated AI bug-hunting scripts made it incredibly easy for anyone to submit low-effort, AI-generated bug reports, overwhelming Google's engineers and open-source maintainers. Previously, the program required significant manual effort for researchers to find and disclose security flaws across Google's open-source ecosystem. The suspension does not affect product vulnerabilities reported before October 1 or reports submitted through the Cloud VRP or the OSS VRP's supply chain reports. This decision follows similar suspensions by other companies, like Linux, which ended support for older network drivers due to an influx of false AI-generated bug reports.",
  "summary": "Google suspends product vulnerability submissions to its Open Source Software Vulnerability Reward Program (OSS VRP) over an influx of invalid AI-driven reports.",
  "key_points": [
    "Google suspends Open Source Software Vulnerability Reward Program",
    "AI-generated bug reports overwhelm engineers and maintainers",
    "Suspension in effect until at least Q1 2027"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}