Curl to End Bug Bounty Following Low-Quality AI-Generated Vulnerability Reports
ID: fe6b98ed-3d15-5a0c-ad68-0d5ce369ef5a
STIX ID: report--fe6b98ed-3d15-5a0c-ad68-0d5ce369ef5a
Feed Name: cybersecurityNews.com
The curl project announced it terminated its bug bounty program in January 2026 after receiving an unsustainable volume of low-quality, duplicate, and AI-generated vulnerability reports that diverted resources; maintainers will no longer offer monetary rewards but continue to welcome legitimate, well-documented disclosures through standard channels.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.