Negligent Google Play is axing its Security Reward Program

Google is ending its Security Reward Program, which paid developers up to $20,000 to find vulnerabilities in popular Android apps. Google says it is "winding down the program due to a decrease in actionable vulnerabilities reported by security researchers." The article argues this is surprising given rising malware on Google Play, citing a Zimperium report that the GriftHorse campaign evaded detection for nearly a year and affected over 10 million victims. It also says Google changed its legal wording so developers must self-report the permissions their apps use, shifting responsibility onto developers.