Mostly True
Google has temporarily suspended part of its open source bug bounty program after a surge of low-quality, AI-generated vulnerability reports overwhelmed reviewers, according to multiple primary sources reviewed in connection with the claim.
The claim states that Google paused its open source bug bounty program after being inundated with "bogus" submissions produced by AI. The evidence supports this core assertion: the suspension was temporary, and the immediate trigger was a wave of automated or AI-assisted reports that did not meet the bar of genuine, exploitable vulnerabilities.
Google's bug bounty programs reward security researchers who responsibly disclose flaws. The influx of AI-generated reports — often superficially plausible but lacking technical substance — strained the review pipeline and prompted the temporary halt of the open source component.
Details such as the precise duration of the suspension, the exact volume of AI-generated submissions, and whether the suspension applies to Google's other bounty programs are not established in the available material. The company's broader response and any long-term changes to submission screening remain to be seen.
Google did temporarily suspend its open source bug bounty program in response to a flood of AI-generated fake vulnerability reports, though the finer details of the pause remain unclear — the claim is Mostly True.