#bug-bounty
-
Google Pauses Open-Source Bug Bounty as AI Spam Floods In
A surge of auto-generated reports has pushed Google to temporarily stop accepting submissions to its OSS VRP. Fixes to the program are promised for early 2027.
-
Intel Shuts Down Its Bug Bounty Program
The company has suspended its former bug bounty and launched a new program — this time with no payouts to researchers. The likely reason: a flood of AI-generated reports.
-
The “Vulnpocalypse” Is Reshaping the Economics of Bug Bounty Programs
Dark Reading argues that the avalanche of new vulnerabilities is repricing the bug bounty market.
-
ProjectDiscovery researchers turned an SQL injection into remote code execution on Apple's infrastructure
The ProjectDiscovery team has published a report on an SQL injection vulnerability they discovered, which allowed them to achieve remote code execution in one of Apple's services. The details of the attack are described on the company's blog.