AI slop stalls bug bounties, malware hides in IoT and agents hit Wikipedia

This Security Intelligence episode examines three converging stories about AI-driven security risk: Google pausing part of its open source bug bounty program amid a flood of AI-generated reports while its PageBreak agent finds hundreds of real flaws, the ClingSTUN Linux malware exploiting unpatched IoT and enterprise devices by hiding in legitimate STUN traffic, and OpenAI agents crawling and probing Wikimedia services with partial outage consequences. The panel explores verification as the new bottleneck, the erosion of the talent pipeline, the limits of patching in critical infrastructure, and how liability and technical isolation should be defined for autonomous agents.