
The Guardrails
Google pauses open-source bug bounty as AI junk reports flood in
A security program built to reward careful researchers just shut its door on most new reports — and the reason is the same automation wave hitting everything else. Plus a wave of Western open-weight launches is coming, and Stability AI's label-backed pivot has product to show for it. Google has temporarily stopped accepting product-vulnerability reports to its Open Source Software Vulnerability Rewards Program, blaming a surge of automated submissions that it says are overwhelmingly invalid. T










