返回全部动态
谷歌因AI提交激增暂停开源漏洞赏金计划
原标题：Google froze its open source bug bounty program due to a ‘significant rise’ in AI submissions
AI 摘要
谷歌因AI自动提交的漏洞报告激增，暂停了其开源软件漏洞奖励计划（OSS VRP），暂停自10月1日起生效，预计2027年第一季度更新。谷歌表示，这些自动提交的报告绝大多数无效，工程师和开源维护者被大量无效或含幻觉的报告淹没。此举反映出AI生成的低质量安全报告对漏洞赏金项目造成的冲击。
以上摘要由 AI 生成，可能存在误差。事实请以原文为准。
正文节选
Blaming a “significant rise” in AI submissions, Google has paused its open source bug bounty program until next year. Last year, TechCrunch reported that cybersecurity experts were warning of that AI slop posed a serious risk to bug bounty programs. Looks like that’s the issue confronting Google’s Open Source Software Vulnerability Rewards Program, where researchers were rewarded for finding vulnerabilities in the company’s open source software. In posts on X and the program website, Google said
发布时间：2026-10-05 04:31
抓取时间：2026-10-05 04:49
来源机构：TechCrunch