Google restricts open source bug bounty amid wave of invalid automated reports
Google has temporarily halted its Open Source Software Vulnerability Reward Program (OSS VRP) for product vulnerability submissions, saying a growing number of automated reports, most of which were invalid, prompted the move. The break was announced on X on October 1st. “This pause is due to a significant increase in automated submissions, the vast majority … Read more