Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports

Google has stopped accepting product vulnerability reports through its bug bounty program for its opensource software The change in effect since October 1 means researchers can no longer submit security flaws in the code of projects such as Go Angular and Protocol Buffers there for a reward Reports about supply chain compromises are still accepted and reports filed before October 1 are