threat-intel
Apple’s bug bounty program is drowning in so much AI slop, it is in danger of missing serious exploits
High
Summary
Apple has implemented strict limits on its bug bounty program to combat a surge of low-quality, AI-generated vulnerability reports. The issue stems from amateur bug hunters using AI to create plausible-but-nonexistent security flaws, overwhelming Apple’s security team and potentially causing genuine vulnerabilities to be missed. This has led to a temporary cap on submissions and a 30-day cool-off period, raising concerns that legitimate reports may be overlooked.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data