研究员用AI炮制虚假漏洞报告，苹果不得不限制漏洞赏金提交量
苹果因低质量的ai生成报告泛滥而限制了安全报告提交量，导致安全研究人员难以报告真实漏洞，从而产生了危险的安全缺口。
apple imposed submission limits on its bug bounty program because researchers are flooding the inbox with low-quality, ai-generated reports that hallucinate vulnerabilities. bynario ceo alfredo pesoli revealed he could not report a critical macos flaw worth $100,000 to $200,000 on the black market due to these restrictions. while apple relies on ai from anthropic and openai to find bugs internally, the manual validation process is overwhelmed. this threatens the viability of traditional bug bounty programs, shifting vulnerability discovery from human crowdsourcing to automated corporate systems.