Apple Limits Number of Vulnerability Reports from Researchers Due to Surge in AI-Assisted Discoveries

Apple has restricted the number of vulnerability reports that researchers can submit simultaneously, as its internal security team has seen a surge in reports due to many researchers using AI models to find software vulnerabilities. This limitation was implemented in June, along with a 30-day cooling-off period. Apple stated that some AI-generated reports may fabricate security risks, putting pressure on the review system. Italian cybersecurity startup Bynario used OpenAI's ChatGPT to discover over 50 vulnerabilities in the latest MacBook operating system within three weeks, including a privilege escalation attack chain that could allow an attacker to gain full control of an Apple computer. However, due to Apple's report submission limits, the company was temporarily unable to submit the relevant vulnerabilities. Apple has since contacted Bynario and begun the review process. The company emphasized that each security report still requires manual verification, and it is also using AI internally to categorize the surge in reports. Researchers can apply for an increase in submission limits to ensure that serious vulnerabilities reach the security team. Bynario estimates that the privilege escalation vulnerability it discovered could be worth between $100,000 and $200,000 on the cybercrime black market. Last year, Apple launched a new vulnerability bounty program, offering rewards of up to $5,000,000 for discovering the most severe and complex threat categories in its software.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.