Apple Limits Bug Bounty Submissions After Flood of AI Slop
Apple said researchers can request higher quotas as AI-generated vulnerability reports overwhelm review teams and force the company to limit open submissions.
- In June, Apple introduced a cap and a 30-day cool-off period on its bug bounty program to manage a surge of poor-quality, AI-generated reports overwhelming its security review teams.
- Researchers using powerful AI models drove the volume spike; cybersecurity startup Bynario used GPT-5.5 to locate more than 50 possible bugs in just three weeks before hitting Apple's new restriction.
- Apple's latest iOS 26.6 update fixed almost 90 security vulnerabilities, yet the company warned that many AI-assisted submissions constitute "AI slop," competing with legitimate findings and delaying critical verification.
- Researchers can easily request an increase to the limit to ensure critical reports reach security teams, as Apple continues relying on human analysts to verify findings alongside automated systems.
- The challenge extends across the industry; bug bounty platform HackerOne uses AI service Hai Triage to sort incoming reports, while Apple has deployed internal technology to identify vulnerabilities in its own software.
20 Articles
20 Articles
AI tools are transforming the security ecosystem, testing bug programs. Apple has been forced to apply new restrictions and limitations to its program. It's all fruit and fruit.
AI is so good at finding flaws that Apple has changed its bug bounty program
Like many tech firms, Apple uses a bug bounty program to help identify security vulnerabilities and other problems in its software. Financial rewards serve as an incentive for bug hunters, but artificial intelligence is changing the landscape. With the discovery of software flaws being so lucrative, people are turning to AI to help find issues faster. This may help to identify problems so they can be fixed, but it is also costing Apple a lot of …
Apple Limits Bug Bounty Submissions After Flood of AI Slop
Apple limited the number of vulnerabilities security researchers can submit to its bug bounty program because of an uptick in reports about fake bugs hallucinated by AI, according to The Financial Times. Apple said its bug review system was seeing a high volume of poor-quality submissions from amateur bug hunters using AI to locate vulnerabilities. In some cases, there is no actual vulnerability, and real submissions are lost in the deluge. The …
Coverage Details
Bias Distribution
- 70% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
