Stop using AI to submit bug reports, says Google

Summary

Google will no longer accept AI-generated submissions to its Open Source Software Vulnerability Reward Program, citing low-quality reports with hallucinated trigger details or little security impact. It will require higher-quality proof, such as OSS-Fuzz reproduction or a merged patch, for certain tiers. The Linux Foundation, with funding from Google, Anthropic, AWS, Microsoft, and OpenAI totaling $12.5 million, will support maintainers through Alpha-Omega and OpenSSF.

Related items

• InfoOpenAI will keep investing in AI data centers despite election results, CFO tells CNBCSame vendor · CNBC Technology
• InfoCould the US midterms burst the AI bubble?Same vendor · BBC Technology
• InfoOpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux ExploitsSame vendor · The Hacker News
• InfoFearing AI disruption, white-collar workers are quitting their jobsSame vendor · The Guardian Technology
• InfoOpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the LineSame vendor · SecurityWeek