Thirty One Thousand Dollars and a Flood of Fake Bugs: Why Google Froze Its Open Source Bug Bounty, October 4, 2026

Thirty One Thousand Dollars and a Flood of Fake Bugs: Why Google Froze Its Open Source Bug Bounty, October 4, 2026 On October 1, Google stopped accepting product vulnerability reports to its open source reward program after thousands of AI generated, hallucinated bug reports buried its engineers. Rick and Laura trace the same pattern through curl, HackerOne, Intel, and the Linux kernel, and explain why paying per report breaks when AI makes reports nearly free, plus what leaders should do ab...