Bug bounty platforms and software companies are struggling to handle a surge of low-quality, AI-generated vulnerability reports.