A surge in AI-generated bug reports overwhelms firms like HackerOne and Nextcloud, forcing new triage tools and stricter vetting.