⌁AI·CYBER·BRIEF▌

#Open source

Industry13 min read

Google stopped paying for open-source bug reports. The flood of AI submissions is only half the problem

Google froze product-bug submissions to its open-source bounty on October 1, citing a surge of mostly invalid automated reports. curl, Linux and Intel show where that leads.

AnalysisBug BountyVulnerability Disclosure
Defense & Research11 min read

Microsoft's AI bug-hunting lab counted 140 Windows CVEs in five months — and says finding bugs is no longer the hard part

Microsoft's FORGE lab reports 140 Windows CVEs, 155 open-source reports and $3.61 Linux crash proofs. Its real lesson: validation and patching, not discovery, now set the pace.

AnalysisMicrosoftAI vulnerability research