GitHub plans a two-tier bug bounty program that cuts rewards for the public and boosts payouts for invite-only researchers, amid a flood of AI-powered reports (Carly Page/The Register)

GitHub 正在调整其漏洞赏金计划,计划将公开提交的奖励金额下调,同时大幅提高定向邀请研究者的赏金上限。原因是 AI 生成的自动化漏洞报告数量激增,导致平台审核效率下降,需通过分级策略过滤低质量提交并留住顶级安全人才。








