Google pauses open source bug bounty program after rise in AI submissions

Category: other Published: Oct 05, 2026 15:00 UTC Ingested: Oct 06, 2026 04:38 UTC

Executive Summary

Google has halted submissions to its Open Source Vulnerability Reporting Program (VRP) after a surge of AI-generated vulnerability reports flooded the system. The pause aims to prevent false positives and maintain the quality of vulnerability data.

Intelligence Metadata - Source Publisher: Malwarebytes Labs - Published Date: 2026-10-05T15:00:56+00:00 - Category: other

Original Description: Google has frozen its OSS VRP product vulnerability submissions to stop the flood of AI generated vulnerability reports.

"Some people thrive on huge, dramatic change. Some people prefer the slow and steady route. Do what's right for you."

— Julie Morgenstern
Source: Malwarebytes Labs