Apple Limits Bug Bounty Submissions After Flood of AI Slop

Apple constricted the fig of vulnerabilities information researchers tin taxable to its bug bounty programme due to the fact that of an uptick successful reports astir fake bugs hallucinated by AI, according to The Financial Times.


Apple said its bug reappraisal strategy was seeing a precocious measurement of poor-quality submissions from amateur bug hunters utilizing AI to find vulnerabilities. In immoderate cases, determination is nary existent vulnerability, and existent submissions are mislaid successful the deluge.

The Financial Times learned of the bounds aft cybersecurity startup Bynario utilized ChatGPT to find much than 50 macOS bugs successful 3 weeks. Bynario recovered a privilege escalation exploit that could fto an attacker get unrestricted entree to a Mac, but was incapable to study it due to the fact that Apple constricted the fig of bug reports Bynario could submit. Bynario sent 8 reports to Apple successful 2025, and different 5 successful 2026 earlier hitting a restriction.

Bynario's laminitis said it is simply a "very hard clip successful the industry" due to the fact that companies are being "flooded by the sheer magnitude of bugs." Apple has since been successful interaction with Bynario and is reviewing the company's submissions.

While Apple present has a headdress connected the fig of unfastened submissions a researcher tin have, researchers tin petition an summation to marque definite Apple's information squad doesn't miss a captious vulnerability.

AI has overwhelmed Apple due to the fact that it chiefly uses humans to cheque reports, but Apple excessively has turned to AI for parsing submissions. AI has besides helped Apple find a immense fig of bugs. Apple's caller iOS 26.6 update fixes astir 90 information vulnerabilities, immoderate of which are credited to Anthropic's Claude and OpenAI's Codex Security.

Apple's bug bounty programme offers rewards up to $2 cardinal for exploit chains utilized for sophisticated, real-world attacks, positive bonuses that tin summation rewards to implicit $5 million. Apple boosts reward totals for bugs recovered successful betas and for bugs that bypass Lockdown Mode.
This article, "Apple Limits Bug Bounty Submissions After Flood of AI Slop" archetypal appeared connected MacRumors.com

Discuss this article successful our forums