Apple's Bug Bounty Inbox Overflowed, Causing $200K macOS Flaw to Go Unreported

Bynario, an Italian startup, was unable to report a serious macOS vulnerability estimated to be worth $200,000 on the black market. Apple has capped the number of submissions per researcher, which contributed to the issue. The Decoder reports that Apple’s bug bounty program is overwhelmed by AI-generated bug reports, leading to legitimate vulnerabilities being overlooked. This situation highlights the challenges in managing bug bounty programs amidst the increasing volume of AI-related submissions, affecting how security researchers can report critical flaws. For practitioners, this underscores the need for more efficient filtering mechanisms in bug bounty systems to ensure genuine vulnerabilities are not missed. More details can be found in The Decoder.