@j4vv4d.comGoogle had to pause their open-source bug bounty program because AI flooded it with garbage submissions. Curl and Intel already did the same. We've weaponised spam now, apparently. #SecurityAwareness #BugBounty #AI
@hendryadrian.bsky.socialGoogle has paused new reports in its Open Source Software Vulnerability Reward Program after a surge of AI-generated, invalid submissions overwhelmed reviewers. Existing reports before Oct. 1 remain valid. #Google #OSSVRP #BugBounty
@hacks.grGoogle says invalid automated submissions made it harder to review real issues, so it’s e…
@helpnetsecurity.comAI slop submissions force Google to freeze its open-source bug bounty
🔗 Read more: www.helpnetsecurity.com/2026/10/05/g...
@lowyat.bsky.socialGoogle Freezes Open Source Bug Bounty Program Due To Flood Of AI Submissions #bugbounty #cybersecurity #google
https://www.lowyat.net/2026/406290/google-freezes-open-source-bug-bounty/
@kill-bait.bsky.socialGoogle Pauses Open Source Bug Bounty Program Amid Surge in AI-Generated Submissions
🤖 IA: It's not clickbait ✅
👥 Users: It's not clickbait ✅
👇👇👇
@denyally.bsky.socialGoogle freezes bug bounty as AI submissions surge
Google paused its open-source bug bounty program after a significant rise in AI-generated submissions. The robots are filing paperwork now.
via TechCrunch AI
#AI #BugBounty #OpenSource #Cybersecurity #gamedev #indiegame #indiedev #pixelart
@t8ngy.bsky.socialBounty الأخرى المتاحة لديها.
برأيكم، هل سيؤدي الاعتماد المفرط على الذكاء الاصطناعي في صيد الثغرات إلى تدمير هذا المجال أم سيجبر الشركات على ابتكار طرق تصفية أكثر ذكاء؟ شاركونا توقعاتكم 👇
@securityonline.bsky.socialDiscover how a teen exposed trillions of records via a Microsoft Titan vulnerability, exploiting a JWT authentication bypass flaw to gain admin access.
#MicrosoftTitan #Vulnerability #Cybersecurity #DataBreach #BugBounty
@niztal.bsky.social💀 Someone Clicked the Link. Is Your Security Team Ready?
Someone Clicked the Link. Is Your Security Team Ready? Exploring this year’s Cybersecurity Awareness Month theme and what it …
#EthicalHacking #PenTest #BugBounty
OffSec · https://www.offsec.com/blog/cybersecurity-awareness-month-2026/
@cl0qsearch.bsky.socialAlterx is a solid pick for that gap. The other move is targeted brute-forcing on non-wildcard zones, then validating with a fast resolver. Dev subdomains hide in DNS, not just in certs. #bugbounty
@cl0qsearch.bsky.socialThe fix is verification over volume: triage pipelines need PoC replay, not just report intake. AI can find real bugs too — the programs that survive will validate impact before payout. #bugbounty
@thedailytechfeed.comOpenHack launches an always-on AI engineer chasing Mac bugs, easing bounty rule chaos and CVE myths. #OpenHack #BugBounty #AppleSecurity #AI #CVE #MacSecurity https://thedailytechfeed.com/openhacks-ai-hits-bug-hunting-hard-redefining-mac-security-with-always-on-scans/
@cl0qsearch.bsky.social39.6M domains scanned, next stop 100M. cl0q maps the internet's attack surface — 26.1M pages indexed, free API, no tracking. DNS security starts with knowing what's out there. #OSINT #threatintel #infosec #bugbounty
@cl0qsearch.bsky.socialcl0q's live index: 604,350 sites answer 3xx redirects across 39.6M known domains. Redirect chains are quiet attack surface - open redirects, header injection, auth confusion - and most scanners never follow past hop 1. We map every hop. cl0q.com #OSINT #ThreatIntel #BugBounty
@compass-security.comCompass Security supports Graubündner Kantonalbank with a structured bug bounty program that enables responsible reporting of potential vulnerabilities within a defined framework. bugbounty.compass-security.com/service-deta...
@cl0qsearch.bsky.socialPhishing domains get certs before they get victims. CT logs show the cert; cl0q shows the infrastructure behind it — 39.6M domains mapped to IPs, ASNs & servers. Pivot from a suspicious cert to the full attack surface in one search. cl0q.com/explore #OSINT #ThreatIntel #BugBounty
@cl0qsearch.bsky.social39.4M domains indexed. blogspot.com alone has 1M+ subdomains. Hidden in that sprawl: dangling CNAMEs aimed at unclaimed services — prime takeover targets. Map your attack surface free: cl0q.com #OSINT #ThreatIntel #BugBounty
@cl0qsearch.bsky.socialOne ASN quietly hosts 37.1% of the sites in cl0q's index — Cloudflare, ~4.9M of them. For threat hunting that's a gift and a curse: pivoting by ASN narrows the haystack fast, but takedown-resistant kit operators hide in the same crowd. cl0q.com/explore #ThreatIntel #OSINT #BugBounty