#bug bounty
12 stories taggedbug bounty.
AI Agents Built a Working Chrome Attack in Six Days. Google Paid $250,000.
A research team at XBOW used a public OpenAI model to find three unknown Chrome flaws and chain them into a one-click takeover. Google shipped the fix in Chrome 152 alongside hundreds of other security patches.
Vercel's $1 Million Sandbox Challenge Turned Up Linux Kernel Bugs Nobody Knew About
A two-week public hacking contest aimed at Vercel's AI code sandbox drew 1,285 submissions and uncovered two serious Linux kernel bugs that affect far more than one company.
AI Is Flooding the Bug Bounty Market and Pushing Prices Down
Security researchers who make a living finding software flaws are earning less per discovery as AI tools drive a wave of reports that is reshaping the entire bug-hunting industry.
Chrome 152 Patches 327 Security Flaws, Most Found by Google's Own AI
Google's largest Chrome update fixes hundreds of vulnerabilities at once, with its own AI tools responsible for the overwhelming majority of discoveries.
A human and an AI teamed up to find hundreds of hackable websites. The results rewrote the rulebook.
PortSwigger researcher James Kettle built an AI system called HTTP Terminator, guided it through 30,000 attack ideas, and together they uncovered a brand-new class of web vulnerability hitting banks and government systems.
AI-Generated Junk Is Clogging Apple's Bug Bounty, Ports Got Hit, and Wall Street Had a Bad Week Online
Three quieter stories from the past week: why Apple's security researchers are drowning in AI noise, how North Carolina ports came under digital attack, and a phishing email that opened a door into Wall Street.
Microsoft Paid Out $20 Million in Bug Bounty Rewards This Year
More than 560 security researchers from 64 countries were paid to find and report software flaws. Not everyone is happy about how the company handled the work.
Two Cloud Giants, Two Flaws, Zero Bug Bounties: The 'Confused Deputy' Problem That Won't Go Away
A security researcher found ways to silently hijack administrator control over both Microsoft Azure and Google Cloud infrastructure. Neither company paid a reward. One quietly fixed its flaw without saying so.
GitHub Slashes Public Bug Bounty Payouts, Reserves Top Rewards for VIPs
From July 27, 2026, GitHub is cutting what it pays public researchers for security finds, while keeping the largest rewards for an invite-only group.
Meta Paid a Researcher $78,000 to Find a Flaw That Exposed Support Chats and Personal Data
An independent security researcher discovered a hole in Meta's internal support system that could have let anyone read private conversations between users and Meta support staff. Meta patched it. Then came the cheque.
Ivanti Used AI to Find a Perfect-Score Security Flaw in Its Own Software. Here Is What That Means.
The company quietly ran an AI project starting in March and says the results are already surprising even its own security chief.
AI Finds Bugs Fast. Proving They're Real Still Takes a Human.
AI tools can scan code and spit out vulnerabilities at speed, but a finding is worthless until someone shows it actually works. That gap matters for anyone worried about software security.