Google pauses open source bug bounty program after rise in AI submissions

Summary by Cyber Security News5 Oct 2026, 17:00 CEST

About this summary. This is a short, independently written summary of an article first published by Malwarebytes Labs. Cyber Security News did not report or verify the underlying story. Read the original: https://www.malwarebytes.com/blog/news/2026/10/google-pauses-open-source-bug-bounty-program-after-rise-in-ai-submissions

Companies like Google and Microsoft are find much bigger numbers of vulnerabilities in their own products as a result of AI. But the same technology is leading to public reporting programs becoming overwhelmed by the mass submission of speculative, duplicated, or hallucinated findings. Now, Google’s announced it has temporarily stopped accepting submissions to its open source bug bounty program, OSS VRP.

Read the full article at Malwarebytes Labs →

Source attribution: headline and facts are from Malwarebytes Labs (malwarebytes.com). Summary method: excerpt of the source description. See our source attribution policy.