谷歌因AI提交“显著增加”而暂停其开源漏洞赏金计划，直至明年。
Blaming a “significant rise” in AI submissions, Google has paused its open source bug bounty program until next year.
去年，TechCrunch报道称网络安全专家警告AI生成的低质量内容对漏洞赏金计划构成严重风险。
Last year, TechCrunch reported that cybersecurity experts were warning of that AI slop posed a serious risk to bug bounty programs Looks like that’s the issue confronting Google’s Open Source Software Vulnerability Rewards Program, where researchers were rewarded for finding vulnerabilities in the company’s open source software.
看来这正是谷歌开源软件漏洞奖励计划面临的问题，该计划奖励研究人员发现公司开源软件中的漏洞。
In posts the program website Google said the bug bounty program was paused as of October 1, with a promise to provide “an update” in the first quarter of 2027.
在项目网站的帖子中，谷歌表示漏洞赏金计划自10月1日起暂停，并承诺在2027年第一季度提供“更新”。
According to Tom’s Hardware Google engineers and open source maintainers were overwhelmed by reports that were invalid or contained hallucinations.
据Tom's Hardware报道，谷歌工程师和开源维护者被无效或包含幻觉的报告淹没。
“This pause is due to a significant rise in automated submissions, the vast majority of which are not valid,” the company said.
公司表示：“此次暂停是由于自动化提交显著增加，其中绝大多数无效。”在此期间，鼓励参与者考虑谷歌的其他漏洞赏金计划。
In the meantime, participants are encouraged to consider Google’s other bug bounty programs.