bug bounty program

Apple has capped its bug bounty program due to an overwhelming number of AI-generated submissions. The surge in submissions from AI systems has prompted the company to limit the program's capacity.

GitHub is restructuring its bug bounty program, focusing on security initiatives. The article provides details about the changes in the program's structure.

ZetaChain dismissed a bug report through its bug bounty program before a $334,000 exploit occurred. The vulnerability was identified and reported but ignored, leading to the attack.

A security researcher reported critical vulnerabilities to Deribit through its bug bounty program, but the exchange silently patched the issues and ignored the researcher for 70+ days, refusing to communicate or pay. Deribit's 'unmanaged' HackerOne program status prevents forced resolution, raising concerns about transparency and trust in its security practices.

An independent security researcher reported critical vulnerabilities to Deribit via its bug bounty program, but the exchange silently patched the flaws and ignored the researcher for over 70 days without communication or payment. The researcher raised concerns about Deribit's lack of transparency and trustworthiness, as the exchange is listed as an 'unmanaged' program on HackerOne, preventing forced resolution.

OpenAI has launched a bug bounty program for its GPT-5.5 model, focusing on biosafety risks. The initiative rewards researchers for identifying vulnerabilities that could enable misuse of biotechnology through AI.