Google has temporarily halted its open source bug bounty program, citing an overwhelming number of AI-generated submissions as the main issue. The move comes after last year’s warnings from cybersecurity experts about the risks AI poses to such programs. According to Google, the majority of the reports submitted were invalid or contained hallucinations, overwhelming engineers and maintainers.

On their official channels, Google announced that the pause would take effect from October 1st, with an update promised for the first quarter of 2027. They encourage participants to consider other bug bounty programs in the meantime. This development highlights the growing challenges of integrating AI with traditional cybersecurity measures.

In a twist of irony, this pause on the bug bounty program—designed to improve security—might be seen as a call for more manual oversight and better coding practices. It’s a reminder that while AI promises efficiency, it may also introduce new complexities.

For now, the future of this program remains uncertain, but one thing is clear: the balance between AI’s potential and human oversight is more critical than ever in the tech world.