Apple capped bug bounties because researchers are spamming it with AI hallucinations
apple limited security report submissions after a flood of low-quality, ai-generated findings clogged its review pipeline. security researchers can no longer report genuine vulnerabilities as easily, creating dangerous gaps.
apple imposed submission limits on its bug bounty program because researchers are flooding the inbox with low-quality, ai-generated reports that hallucinate vulnerabilities. bynario ceo alfredo pesoli revealed he could not report a critical macos flaw worth $100,000 to $200,000 on the black market due to these restrictions. while apple relies on ai from anthropic and openai to find bugs internally, the manual validation process is overwhelmed. this threatens the viability of traditional bug bounty programs, shifting vulnerability discovery from human crowdsourcing to automated corporate systems.