Google is now paying bug bounties for generative AI flaws
Google just expanded its Vulnerability Rewards Program (VRP) to cover generative AI attack scenarios, releasing new guidelines on what qualifies as an in-scope bug. The company is also rolling out prototypes for model signing via Sigstore and SLSA to secure AI supply chains against tampering. Why it matters: Google is putting cash behind crowdsourced safety to catch jailbreaks and hallucinations before attackers do.