+ 44 ( 01244 ) 911212

open source bug bounty google pause ai submissions a mailbox overflowing with envelopes

Google froze its open source bug bounty program due to a ‘significant rise’ in AI submissions

October 5, 2026
Artificial Intelligence
Comment off

Google has paused new product vulnerability submissions to its open source bug bounty, the OSS VRP, after a “significant rise in automated submissions, the vast majority of which are not valid”. Supply chain reports and queued reports are unaffected, and Google promises an update in Q1 2027. We explain what is paused, why AI slop broke the model, how curl, HackerOne’s Internet Bug Bounty, Node.js and Intel got there first, and what it means for researchers and UK businesses.

muse safety warning meta bug bounty vulnerability a traffic cone on a square base

Meta Bolsters Muse Safety Warning After Security Vulnerability Found

September 25, 2026
Artificial Intelligence
Comment off

Meta is adding a clearer safety warning inside Muse after an outside researcher reported, through its bug bounty program, a previously unreported vulnerability that could let an attacker reach a user’s sensitive personal information. It is the third Muse security story in five days. We separate what is known from what is not, compare the three incidents, explain Meta’s own containment design and the lethal trifecta, and set out what users and IT teams should do.