Apple raised its top Security Bounty payout to $2 million as of November 2025, with potential bonuses exceeding $5 million for sophisticated zero-click exploit chains. The volume of vulnerability reports generated by AI tools is overwhelming the company’s security teams and bug bounty program. Since launching the program, Apple has paid out more than $35 million to over 800 researchers. Large language models enable less skilled operators to mass-produce superficially plausible but ultimately useless reports, creating a triage nightmare for administrators. This problem affects the entire industry, threatening the very programs designed to incentivize vulnerability discovery.
Source: Read the original article
