Google Stops Accepting AI Bug Reports

Google ends its Open Source Vulnerability Reporting Program after an influx of automated, invalid bug reports. The company had previously praised AI for finding bugs in March 2026 but now halts submissions due to a sharp rise in hallucinated issues and low-impact findings that overwhelm their security team.