Intel Suspends Bug Bounty Program, Shifts to Non-Paid Vulnerability Disclosure System

Intel has ended its bug bounty program that paid researchers up to $100,000 for discovering security vulnerabilities, moving instead to a non-paid responsible disclosure system on the Intigriti platform. The program, launched in 2017, had been widely regarded as effective, with nearly half of Intel's 2020 CVEs sourced through it. No official reason has been provided, but industry-wide challenges with AI-generated vulnerability reports — which have overwhelmed programs at Linux, Curl, and HackerOne — are seen as a likely contributing factor.

Torvalds has noted that a growing volume of AI-generated duplicate submissions is placing strain on the management of security mailing lists. The open-source utility Curl ended its bug bounty scheme following a flood of low-quality submissions generated by artificial intelligence tools. HackerOne's Internet Bug Bounty programme suspended the intake of new submissions earlier this year, pointing to the widespread adoption of AI-assisted research as a factor that has pushed the rate of vulnerability discovery beyond what the platform can comfortably handle. Researchers identifying vulnerabilities in Intel products must disclose their findings without receiving any financial reward.

Intel Suspends Bug Bounty Program, Shifts to Non-Paid Vulnerability Disclosure System

Related Posts

Intel Suspends Bug Bounty Program, Shifts to Non-Paid Vulnerability Disclosure System

Related Posts