Intigriti (Organization): news timeline & CVEs

Google pauses open source bug bounty program after rise in AI submissions

Google paused its open-source bug bounty after invalid, mostly automated AI submissions overwhelmed reviewers.

Google temporarily stopped accepting reports to its open-source vulnerability reward program, OSS VRP, citing a surge of automated submissions that were largely invalid. Malwarebytes notes similar pressure earlier in 2026, when curl ended its HackerOne bounty and Intel's Intigriti program reportedly dropped payouts amid AI-generated reports. The pause is meant to let Google add controls such as proof-of-concept requirements and rate limits, with an update promised in the first quarter of 2027.

Malwarebytes Labsupdated Oct 6, 10:10 UTC · 2d agofirst Oct 5, 15:00 UTC · 3d agoIndustry 10 sources1

Google halts open-source bug bounty program amid AI spam surge

Google paused OSS Vulnerability Rewards submissions after a surge of invalid AI-generated bug reports.

Google temporarily stopped accepting product-vulnerability submissions to its Open Source Software Vulnerability Rewards Program after a surge of automated, mostly invalid AI-generated reports. Supply-chain reports, outstanding tickets, the Patch Rewards Program offering up to $15,000, and Cloud VRP remain available. Google said submissions before October 1, 2026 are unaffected and promised a program update in Q1 2027. Curl previously ended its HackerOne bounty over AI-slop reports, and Intel removed Intigriti financial rewards in September.

BleepingComputerupdated Oct 6, 10:10 UTC · 2d agofirst Oct 5, 08:27 UTC · 3d agoIndustry 10 sources1

Risky Bulletin: Intel ends paid bug bounties

Intel dropped cash payouts from its bug bounty, which previously paid up to $100,000.

Intel removed financial rewards from its bug bounty program on Intigriti, replacing payouts of up to $100,000 with a “No bounty” marker. The last snapshot still listing rewards dates to September 13, and Intel declined to comment. The company had raised payouts after the 2017 Spectre and Meltdown disclosures to encourage research before chips shipped. The bulletin argues that floods of AI-generated bug reports may lead other companies to cut cash bounties.

Risky Business NewsSep 28, 01:31 UTC · 11d agoIndustry1

Intigriti

Timeline3 articles

Appears with

Google pauses open source bug bounty program after rise in AI submissions

Google halts open-source bug bounty program amid AI spam surge

Risky Bulletin: Intel ends paid bug bounties