PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Bugcrowd policy changes to address “AI slop” submissions

bugcrowd.com | blog | #ai-security | #bug-bounty | #bugcrowd | #policy | #ai-slop | #identity-verification | #anti-abuse | #platform-policy | #sloptimism | #spam-control
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Facing a 334% triage-queue spike from AI slop, Bugcrowd updates submission policy, rate controls, and detection to target farms training AI on live programs and novices submitting unverified findings.
Published
Collected

Related coverage

blog · bugcrowd.com
Continuing our work to reduce AI slop submissions and protect signal quality
Bugcrowd outlines four changes against sloptimism: bans for submission farming, mandatory identity verification, throttling for low performers, and CAPTCHA validation before submitting.
blog · bugcrowd.com
The AI slop era: Do most vulnerabilities actually matter?
A Bugcrowd panel on the 'AI slop' era: after filtering hallucinated reports, AI-assisted discovery still yields 10x more valid findings than teams can fix, so context must drive prioritization.
research · bugcrowd.com
Introducing priority queue bypass: A new way to recognize top hackers
Bugcrowd launched Priority Queue Bypass, fast-tracking triage for researchers with proven accuracy and professionalism, as AI-generated reports strain bug bounty triage queues.
blog · bugcrowd.com
Behind the scenes of PHP2Shell: What the last 72 hours taught us
PHP2Shell hit fast. Bugcrowd’s CISO shares what 72 hours of response taught us, plus three lessons for CISOs facing the next critical vulnerability.
blog · bugcrowd.com
CISA’s VDP platform: Five years of collaborative defense
CISA’s VDP Platform marks five years with nearly 45,000 submissions and 5,300+ vulnerabilities fixed across 60+ federal agencies. See the key findings.
blog · bugcrowd.com
Weird ways to hide shellcode
Discover a novel red teaming technique for hiding shellcode inside procedurally generated mazes, using shortest-path algorithms to disguise payloads from EDR and antivirus detection.
Back