Legitimate vulnerabilities could face delays before they are reviewed and fixed.

AI slop seems to be overwhelming bug bounty programs.

Google says it has plans to update the bug bounty program in the first quarter of 2027. In the meantime, it will retool the ...

Overview:  Google paused new product vulnerability submissions to its OSS VRP on October 1, 2026, after a sharp rise in ...

Google is pausing its OSS bug bounty program after AI-generated reports flooded the system with hallucinated and low-impact vulnerability ...

BATON ROUGE, La., March 24, 2026 /PRNewswire/ -- Minimus, the leader in hardened container images and secure container software, today announced the Minimus Open Source Program, an initiative to help ...

Vulnerabilities in Google's open source projects that are closely linked to Google Cloud or AI products are directed to the Google Cloud Vulnerability Reward Program (Cloud VRP) or the AI ...

Open source is a critical component of just about every modern software stack -- from databases to cloud security-- and a recent report from Synopsys concluded that 98% of codebases contain at least ...

Solana releases an open-source DvP program letting institutions settle tokenized securities against USDC atomically, with near-instant finality.