研究員用AI炮製虛假漏洞報告，蘋果不得不限制漏洞賞金提交量
蘋果因低質量的AI生成報告氾濫而限制了安全報告提交量，導致安全研究人員難以報告真實漏洞，從而產生了危險的安全缺口。
apple imposed submission limits on its bug bounty program because researchers are flooding the inbox with low-quality, ai-generated reports that hallucinate vulnerabilities. bynario ceo alfredo pesoli revealed he could not report a critical macos flaw worth $100,000 to $200,000 on the black market due to these restrictions. while apple relies on ai from anthropic and openai to find bugs internally, the manual validation process is overwhelmed. this threatens the viability of traditional bug bounty programs, shifting vulnerability discovery from human crowdsourcing to automated corporate systems.