Bug Bounty

A bug bounty program incentivizes external security researchers to identify and report vulnerabilities in AI systems and related software before malicious actors can exploit them. Organizations offering bug bounties create structured channels for responsible disclosure, often with rewards tied to vulnerability severity and impact. For enterprises deploying AI, bug bounties extend security testing beyond internal teams and help fulfill governance obligations to identify and remediate risks in production systems.

1 item

ResearchGlobal2026-09-14

$50K in Bug Bounties Confirms AI Customer Service Agents Are Live Attack Targets

Intigriti researchers demonstrated successful attacks against deployed AI customer service agents at DEF CON 34, earning over $50,000 in bounties without automated scanners. Attack techniques included prompt injection via email, phishing from legitimate support addresses, MFA bypass, and OTP exfiltration. Enterprises running AI agents in customer-facing roles face structural security gaps that traditional application controls do not cover.

Intigriti prompt injection agentic AI AI agent security MFA bypass customer service AI red teaming bug bounty