Recently, security researcher Jordy successfully used generative AI technology to discover a critical vulnerability in Sony's PS5 system, and through this achievement received a $50,000 (approximately 339,000 RMB) bounty via Sony's bug bounty program. The vulnerability allows running Linux on the PS5 console, but the incident immediately sparked controversy in the console modding and security research communities.
Earlier, Google security engineer theflow0 had already discovered the vulnerability in 2025 and originally planned to keep it secret until after the release of GTA6, so that players could update the system to experience the new title while still maintaining a Linux environment. Jordy initially reached an agreement not to report it for the time being, but given that other people subsequently independently discovered the vulnerability using large language models as well, he judged that it would sooner or later be publicly submitted, and ultimately chose to report it to Sony.
Sony then quickly completed the vulnerability fix, leaving players facing the practical dilemma of being unable to preserve the old firmware vulnerability while enjoying games on the new system. Some modding enthusiasts questioned that this action disrupted the community's research plans, while supporters argued that independently discovering the vulnerability and claiming the bounty was perfectly reasonable. Jordy said the prize money could not only be used to buy GTA6, but would also provide financial support for his mother, who is terminally ill.
This incident highlights that the application of generative AI in the field of security vulnerability discovery is greatly accelerating the frequency of security findings, while also reflecting the long-term tug-of-war between official bug bounty mechanisms and the gaming community's demand for customized exploration.