1
Bug bounty businesses bombarded with AI slop
AI生成的虚假漏洞报告泛滥，Bugcrowd三周内报告量暴增四倍，Curl被迫暂停赏金项目。
"Never-ending" AI slop strains corporate hacking reward schemes.
2
Raising the bar: Quality, shared responsibility, and the future of GitHub’s bug bounty program
GitHub重新定义漏洞赏金计划，从质量到共同责任，为安全社区树立新标杆。这份基于实战的思考，值得每一个安全从业者细读。
We're updating our bug bounty program standards to prioritize quality submissions, clarify shared responsibility boundaries, and evolve how we reward …