On October 1, Google announced it would stop accepting new vulnerability submissions for its Open Source Software Vulnerability Reward Program (OSS VRP). The decision was attributed to a significant increase in automated submissions, the majority of which were deemed unhelpful. Submissions made before October 1 will be processed as usual. Google has promised an update on the program in the first quarter of 2027. In March, the company had already prohibited the submission of AI-generated content to the OSS VRP. Additionally, in April, HackerOne suspended payments for its Internet Bug Bounty, and in September, Intel announced it would no longer offer cash rewards to bug hunters.