Google pauses bug bounty payouts as AI-generated junk reports overwhelm reviewers

Google has paused payments for vulnerabilities found in its open-source products because its review team is flooded with low-quality, AI-generated reports. This marks a notable shift in the company's vulnerability reward program, reflecting the operational impact of AI-generated spam on security processes. The move could reduce incentives for legitimate researchers and affect the security of open-source ecosystems.