最高悬赏 10 万美元，英特尔突然关停漏洞赏金计划

AI Digest

英特尔暂停高额漏洞赏金计划，转向无现金奖励的负责任披露机制，主因AI生成漏洞报告激增导致维护压力。

Intel halts its high-bounty bug bounty program, shifting to non-monetary responsible disclosure due to AI-generated vulnerability reports overwhelming systems.

Key points

• 英特尔停运原赏金计划，改用Intigriti平台无现金奖励机制 Intel suspended its high-bounty program, adopting Intigriti's non-monetary disclosure model
• AI工具批量生成漏洞报告导致维护负担激增，引发行业普遍问题 AI-generated vulnerability reports overwhelm maintenance teams, a widespread industry issue
• 旧计划曾显著提升漏洞修复效率，2020年修复近半数CVE漏洞 Legacy program significantly boosted vulnerability fixes, addressing half of 2020 CVEs
• Linux内核CVE数量激增至2000个，维护人员不堪重负 Linux kernel CVE count surged to 2000, straining maintenance resources
• HackerOne等平台已因AI报告泛滥暂停接收提交 HackerOne halted submissions due to AI-driven report overload

Takeaway: AI技术正在重塑网络安全漏洞管理模式。 / AI is transforming vulnerability management practices in cybersecurity.

Why it matters 揭示AI技术对网络安全行业的影响及企业应对策略变化。