AI churns out bug reports faster than Google can verify them

On October 1, Google paused its program that compensates external researchers for identifying security flaws in its open-source projects. TechCrunch reported that Google has paused its Open Source Software Vulnerability Reward Program (OSS VRP) due to a significant increase in automated submissions, as announced on X and the program website. Google said reports filed before October 1 would still be processed, while supply-chain reports would continue to be accepted.