Apple Limits Bug Bounty Submissions as AI-Generated Reports Flood the Queue

Apple capped bug bounty submissions and added a 30-day cool-off after AI-generated security reports overwhelmed reviewers, risking real vulnerabilities found by human researchers being buried. Researchers exceeding the cap must file a special request. Top payouts reach $200,000. Google, facing the same pressure, restructured payout tiers to reward harder-to-find bugs that AI tools struggle to surface.