Intel has suspended its paid bug bounty program, hosted by Intigriti, and replaced it with a new program that does not offer financial rewards for reported vulnerabilities. The change comes amid a surge in security reports across the software ecosystem, potentially linked to the increased use of AI and Large Language Models (LLMs) in vulnerability discovery.
Previously, Intel’s bug bounty program provided awards ranging from $500 to $100,000 USD for valid bug reports covering its hardware, software, firmware, and open-source projects. The existing program, accessible through Intel.com and Intigriti, is now listed as “suspended,” with much of the former program information removed. Archived information is available via the Wayback Machine.
Yesterday, Intel launched a new bug reporting program through Intigriti, explicitly stating it is “a responsible disclosure program without bounties.” No official explanation for the program change has been released. However, one Phoronix reader noted the timing coincides with a significant increase in security reports being submitted to projects like the Linux kernel, potentially due to automated vulnerability detection using AI/LLMs.
Read the original coverage
💬 Comments
📜 Comment Policy