This decision by Apple comes just a week or so after GitHub made changes to its payment structure to disincentivize low-severity bug reports.
Apple introduced quota caps and 30-day cool-offs for vulnerability reports to stem AI-spam. Bynario found a $100k+ exploit in 3 weeks but hit rate limits, showing bug bounty programs tighten intake as security teams adapt validation against AI noise.
When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.
Apple has introduced a quota cap so that security researchers cannot inundate it with low-quality AI bug reports that are overwhelming it.
Paul Hill
Neowin
@ziks_99 ·
As it grapples with a surge in “AI slop” security reports, Apple has recently made changes to its bug bounty program. Here are…
Apple has restricted open security reports per researcher after AI-generated submissions overwhelmed its review process with…
Apple raised its top bug bounty to $2 million but faces a flood of AI-generated vulnerability reports straining its security…
Apple's bug bounty program is drowning in AI-generated bug reports. The company has capped submissions per researcher because…
The company's security researcher reporting systems are being inundated with low-quality warnings created by AI tools.
Like it or not, Big Tech is increasingly incorporating AI into the development of its products, even for fixing security issues.
