AI Slop Locked a Real $200K Vulnerability Out of Apple's Bug Bounty
Bynario found a critical macOS vulnerability worth up to $200,000 — and couldn't submit it to Apple. The bug bounty program stopped accepting reports after being flooded with thousands of AI-generated fakes.
Italian startup Bynario discovered a critical macOS vulnerability — one worth between $100,000 and $200,000 on the black market, granting full control over a machine. But submitting it to Apple proved impossible: the bug bounty program had closed its intake, overwhelmed by thousands of AI-generated reports describing entirely fabricated vulnerabilities.
When anyone can flood a system with fake reports, real vulnerabilities stay open. The mechanism that underpins the security of a billion devices has, for the first time, encountered an attack aimed not at code, but at the intake process itself.
Source: the-decoder.com
Free course
Stop reading about AI — start building with it
The free Claude Code course: your first site, tool or game — no coding. No upsells, no cross-sells — nothing to buy here.
Start free →▌ Related guides
Author
Evgenii Arsentev
PhD · Chief Executive Officer, digital health
Articles · Latest articles