News Summary

• Google has suspended its paid bug bounty program due to a lack of quality reports.
• Bug bounty programs are intended to be mutually beneficial.
• With the advent of AI, many programs have been overwhelmed with low-quality reports.
• Google says it has committed to reformatting the program and providing an update in the first quarter of 2027.
• In the meantime, bounty hunters are encouraged to continue submitting reports to Google's other VRP or Patch Rewards programs, which remain active..
• Apple's $2 million bounty for discovering exploits that can achieve the same goals as a sophisticated mercenary spyware attack.