Excerpt: The opening of an article from Tom’s Hardware. Read the original for the full story.
Google has officially suspended product vulnerability submissions to its Open Source Software Vulnerability Reward Program (OSS VRP) — a bug bounty program — over an influx of invalid AI-driven reports. The company, in an official X post on October 1, encouraged participants to explore other VRP programs and committed to providing an update by the first quarter of 2027, while it reformats and works on this aspect of the program in the meantime.
The suspension went into effect on October 1 — the day of the announcement — and does not affect product vulnerabilities submitted before that date.
Source: Tom’s Hardware • Etiido Uko • October 3, 2026