Google Pauses Open-Source Reward Program as AI Reports Disrupt Operations

    Google temporarily suspended its reward program for security vulnerabilities in open-source software starting October 1. The company attributed the decision to a sharp increase in automated submissions created with artificial intelligence. Because most of the reports were unfounded, it became difficult for the program to operate normally.    Under the program, researchers who found security vulnerabilities in Google's open-source software received rewards. This helped identify and resolve real problems. However, it became increasingly difficult to identify useful reports among the many automatically submitted reports.    According to the report, the company's engineers and those responsible for open-source projects received a large number of unfounded reports. Some contained information fabricated by artificial intelligence that was not based on facts. As a result, more time and resources were spent reviewing submissions about real security vulnerabilities.    Google will provide its next update on the program in the first quarter of 2027. It has not yet been confirmed whether the program will reopen at that time. In the meantime, participants can submit reports to Google's other security vulnerability reward programs.