AI is flooding bug bounty programs with fake reports, forcing companies like Nextcloud and HackerOne to suspend them. This surge in low-quality submissions strains security teams and impacts the effectiveness of these programs, despite significant payouts in the past.
Generative AI tools are overwhelming bug bounty programs with fake reports, forcing companies to suspend payouts and increasing workload for cybersecurity professionals. The influx of low-quality submissions is straining resources and prompting a shift towards stricter verification and defensive AI.
Bug bounty programs are struggling with a surge of low-quality reports generated by AI, leading some companies like Curl and Nextcloud to suspend their programs. While AI can help researchers find flaws faster, it has also lowered the barrier to entry, causing an influx of automated or erroneous submissions that are overwhelming security teams.
