Google has suspended its Open Source Software Vulnerability Rewards Program starting October 1, 2024, due to a substantial increase in automated bug submissions generated by artificial intelligence. The company stated that the majority of these reports were invalid or contained hallucinated vulnerabilities, overwhelming both Google engineers and open source maintainers. This rise in AI-driven submissions has made it difficult to manage the program effectively. Google announced on its official channels that it plans to provide an update on the program’s status in the first quarter of 2027. Meanwhile, researchers interested in vulnerability reporting are encouraged to participate in Google’s other bug bounty initiatives. This pause highlights the challenges AI-generated content poses to traditional cybersecurity workflows and bug bounty programs.