NEW: Security researchers are increasingly using AI to find flaws and report them to bug bounty platforms.
And just like other LLM-produced content, the reports include hallucinations. Coupled with the AI-powered increased volume of reports, this is causing problems for some bug bounty platforms.
“That’s the problem people are running into, is we’re getting a lot of stuff that looks like gold, but it’s actually just crap,” Vlad Ionescu, who runs a startup that develops AI-powered bug hunters, told me.
AI slop and fake reports are exhausting some security bug bounties | TechCrunch
"We're getting a lot of stuff that looks like gold, but it's actually just crap,” said the founder of one security testing firm. AI-generated security vulnerability reports are already having an effect on bug hunting, for better and worse.
TechCrunch (techcrunch.com)
