AI slop submissions force Google to freeze its open-source bug bounty

T2Covered by 1 source · first reported by Help Net Security at 05 Oct, 07:37 UTC

Google has stopped accepting new product vulnerability reports through its Open Source Software Vulnerability Reward Program (OSS VRP), after a wave of invalid, AI-generated submissions swamped the engineers and open source maintainers who review them. The rules page for Google’s OSS VRP states…