Bug bounty businesses bombarded with AI slop
He added there was a “third cohort” of “experienced AI builders” who had developed automated “end-to-end scanning and submission systems” that were “creating absolute carnage.”
Curl’s creator, Daniel Stenberg, wrote in a blog post that the “never-ending slop” had taken “a serious mental toll to manage and sometimes also a long time to debunk.”
Software group Nextcloud suspended its bug bounty program in April because of the “massive increase of low-quality reports.” It said it hoped to resume the program once it had found a way to filter submissions effectively.
The surge in AI-generated reports comes as Anthropic last month launched Mythos, its new cyber AI model, which it says can find software flaws faster than humans.
Companies running bug bounty programs have started to introduce more stringent background checks to combat the problem, as well as building AI agents to triage submissions.
HackerOne, whose bug-reporting platform serves Goldman Sachs,...
Copyright of this story solely belongs to arstechnica.com. To see the full text click HERE
