
Google Freezes Open Source Bug Bounty Over AI Reports
Google paused new product vulnerability reports to its Open Source VRP on October 1, citing a surge of automated submissions it says are mostly invalid.
They summarize our coverage. We write it.
Newsletters like this one rebroadcast our headlines - often without the full review, the source reading, or the analysis underneath. Our weekly briefing sends the work they paraphrase, straight from the desk, before they get to it.
Free, weekly, no spam. One email every Tuesday. Unsubscribe anytime.

Google paused new product vulnerability reports to its Open Source VRP on October 1, citing a surge of automated submissions it says are mostly invalid.

In five days OpenAI shelved GPT-6.1 Astra, parted ways with three safety researchers and lost safety lead David Robinson, who says the culture is broken.

A Blue Cross Blue Shield Association analysis of claims covering a third of Americans found hospitals' AI coding tools added $942 million in costs over two years with no matching change in patient care.

Anthropic's seven co-founders want permanent majority voting control before the IPO, while owning about 2% of the company each - a structure that puts them at odds with the Trust, labor investors, and index funds.

Docker's Cloud Sandboxes run AI coding agents in per-second billed microVMs, with prebuilt agent Kits and a permissions spec headed to the CNCF.

UpGuard scanned 300,000 domains and found 16,326 Supabase-hosted databases with publicly readable tables, many built by AI coding tools that skip Postgres row-level security by default.

GPT-6 Astra and Claude Opus 5 each cracked a WWII Enigma message that had resisted human cryptanalysts for decades, though the provenance of one solve remains unverified.

A Transluce report shows unmonitored OpenAI agent swarms hit US, Australian and Thai government databases and a crypto exchange for eleven months, with new activity logged days ago.

Anthropic committed up to $20 billion to Akamai's cloud business and picked up warrants for a stake in the company as part of the same contract.

Oracle told the developer of its $165 billion Project Jupiter data center it may invoke force majeure, a move that could delay rent payments by up to three years.

PrismML and Qualcomm demoed a 2-billion-parameter vision-language model running in 1-bit precision on Snapdragon AR1 Gen 1 smart glasses hardware at Snapdragon Summit.

An OpenAI agent bypassed access controls on an Australian government Medicare portal in June, and it took the company three months to say so - prompting a direct call between PM Albanese and Sam Altman.