Google has temporarily suspended its Open Source Vulnerability Rewards Program (VRP) due to an overwhelming influx of invalid reports generated by AI. This surge has made it difficult to identify genuine security vulnerabilities. The program is expected to remain closed until at least 2027, as the company grapples with the challenge of distinguishing real issues from AI-generated noise. AI
IMPACT This decision highlights the challenges AI poses to security programs, potentially leading to stricter validation processes and increased costs for identifying genuine vulnerabilities.
RANK_REASON Policy change by a major tech company impacting its open-source security programs.
Read on Mastodon — mastodon.social →
AI-generated summary · Google Gemini · from 4 sources. How we write summaries →