Post #4479591
2026-08-10 06:06 UTC
@thecybersecguru@infosec.exchange this is so sad. Bug Bounty was very valuable when finding new bugs was hard. Now there is a flood of alternative methods for finding critical bugs for for cheap. HackerOne will not survive this. Automation and open APIs for reporting can be an avenue for some of bug bounty to live in. The LHE era is over, if crits are less valuable there is no budget to cater for hackers anymore. There is enough to be done with the output of any AI scanner. 🪦
Replies (1)
-
@thecybersecguru@infosec.exchange 2026-08-10 06:18
@Kugg@infosec.exchange Also, most AI generated bug reports are due to LLM Hallucinations. If AI development goes on like this then bug bounty, as we know, is dead. In a way, the whole software ecosystem is going to be dead anyways. AI generated code being audited by AI models which were trained on similar code. This will create a feedback loop and with each iteration, both coding and bug detection by AI will become worse. At some point of time in the near future it'll be something like AI will only be able to detect very few bugs. It'll be a predictable pattern. Then humans will be needed much more