Google has temporarily halted bug bounty rewards for open-source software vulnerability reports effective October 1. The decision stems from an overwhelming influx of invalid, automated submissions clogging the review pipeline. Reports regarding supply chain compromises and those submitted prior to the cutoff date continue to be processed.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →