PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Continuing our work to reduce AI slop submissions and protect signal quality

bugcrowd.com | blog | #ai-security | #bug-bounty | #bugcrowd | #ai-slop | #identity-verification | #anti-abuse | #platform-policy | #spam-control
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bugcrowd outlines four changes against sloptimism: bans for submission farming, mandatory identity verification, throttling for low performers, and CAPTCHA validation before submitting.
Published
Collected

Related coverage

blog · bugcrowd.com
Bugcrowd policy changes to address “AI slop” submissions
Facing a 334% triage-queue spike from AI slop, Bugcrowd updates submission policy, rate controls, and detection to target farms training AI on live programs and novices submitting unverified findings.
blog · bugcrowd.com
The AI slop era: Do most vulnerabilities actually matter?
A Bugcrowd panel on the 'AI slop' era: after filtering hallucinated reports, AI-assisted discovery still yields 10x more valid findings than teams can fix, so context must drive prioritization.
blog · bugcrowd.com
Sloptimism is breaking any system built on human validation
A 334% triage-queue spike traced to sloptimism — AI reports trusted over evidence. The same failure mode strains open source and academia, where faking is cheap but verifying is not.
research · bugcrowd.com
Introducing priority queue bypass: A new way to recognize top hackers
Bugcrowd launched Priority Queue Bypass, fast-tracking triage for researchers with proven accuracy and professionalism, as AI-generated reports strain bug bounty triage queues.
blog · bugcrowd.com
Behind the scenes of PHP2Shell: What the last 72 hours taught us
PHP2Shell hit fast. Bugcrowd’s CISO shares what 72 hours of response taught us, plus three lessons for CISOs facing the next critical vulnerability.
blog · bugcrowd.com
CISA’s VDP platform: Five years of collaborative defense
CISA’s VDP Platform marks five years with nearly 45,000 submissions and 5,300+ vulnerabilities fixed across 60+ federal agencies. See the key findings.
Back