APPLE STRUGGLES TO KEEP PACE WITH AI “BUG” HUNTERS

Summary from the TLDR InfoSec newsletter

Apple has announced new caps on the number of reports that bug bounty hunters can submit to its vulnerability disclosure program (VDP) as well as a waiting period to combat a deluge of low quality, AI-generated reports. Cybersecurity startup Bynario reported that it was blocked by these limits from submitting a valuable exploit chain that could lead to privilege escalation. Apple has stated that researchers can request an increase to the limit if needed.