#bounty

Google halts open-source bug bounty program amid AI spam surge

Oct 5, 2026 // 12:37

Google has now suspended submissions to its Open Source Software Vulnerability Rewards Program (OSS VRP) after being flooded by AI-generated reports. The company’s OSS VRP […]

Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer

Sep 18, 2026 // 12:20

A financially motivated threat actor has been linked to the development and distribution of a JavaScript (JS)-based information stealer known as PhantomRaven via the npm […]

GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP Tier

Jul 22, 2026 // 22:45

Beginning July 27, 2026, GitHub will cut public bug bounty payouts by at least half at every severity level. Critical findings will drop from $20,000-$30,000+ […]