연구자들이 AI 환각으로 스팸을 쏟아내자 Apple, 버그 바운티 상한 설정
저품질의 AI 생성 보고가 검토 파이프라인을 막으면서 Apple은 보안 보고서 제출을 제한했습니다. 보안 연구자들은 더 이상 진짜 취약점을 쉽게 보고할 수 없어 위험한 공백이 생겼습니다.
apple imposed submission limits on its bug bounty program because researchers are flooding the inbox with low-quality, ai-generated reports that hallucinate vulnerabilities. bynario ceo alfredo pesoli revealed he could not report a critical macos flaw worth $100,000 to $200,000 on the black market due to these restrictions. while apple relies on ai from anthropic and openai to find bugs internally, the manual validation process is overwhelmed. this threatens the viability of traditional bug bounty programs, shifting vulnerability discovery from human crowdsourcing to automated corporate systems.