AI-generated fake reports overwhelm bug bounty programs, forcing HackerOne and Nextcloud to suspend payouts and rethink security strategies.