AI Slop Is Polluting Bug Bounty Platforms with Fake Vulnerability Reports

stapp · May 7, 2025

Bug bounty programs, once celebrated for incentivizing independent researchers to report real-world vulnerabilities, are now under siege from a new, low-effort grift: AI-generated fake vulnerability reports, a phenomenon that falls under the broader category of “AI slop." These reports increasingly wasting maintainers’ time and, alarmingly, are getting rewarded with payouts.
Click to expand...

https://socket.dev/blog/ai-slop-polluting-bug-bounty-platforms

stapp · May 7, 2025

"We now ban every reporter instantly who submits reports we deem AI slop," Stenberg added. "A threshold has been reached. We are effectively being DDoSed. If we could, we would charge them for this waste of our time."

He went on to say that the project has never received a single valid bug report that was generated using AI, and their rate is increasing.
Click to expand...

https://www.theregister.com/2025/05/07/curl_ai_bug_reports/

Log in or Sign up

AI Slop Is Polluting Bug Bounty Platforms with Fake Vulnerability Reports

stapp Global Moderator

stapp Global Moderator

Log in or Sign up

AI Slop Is Polluting Bug Bounty Platforms with Fake Vulnerability Reports

stapp Global Moderator

stapp Global Moderator

Useful Searches