AI Floods Apple's Bug Bounty Program, Review Team Taken Offline

A flood of AI-generated vulnerability reports is hitting Apple's bug bounty program in bulk, forcing Apple's review team to go offline and pause processing, QbitAI reported on August 7. It is the latest case of AI automation disrupting security response workflows.

Apple's bug bounty program has long offered rewards to security researchers who find and report vulnerabilities. Now AI tools can generate and submit large volumes of plausible vulnerability reports at low cost, causing submission counts to balloon far beyond what human reviewers can process.

Faced with the overwhelming volume, Apple's review team has temporarily gone offline to deal with the flood of AI-generated submissions. The pause means vulnerability reports are no longer being processed and answered promptly, disrupting the communication rhythm between researchers and Apple.

The phenomenon is not unique to Apple. As generative AI is applied to automated vulnerability hunting and bulk submission, security response pipelines across the industry are facing similar noise, with real vulnerabilities mixed in among AI-generated reports and filtering becoming significantly harder.

What matters is that bulk AI submissions are changing how bug bounty programs operate: platforms may need stricter automated filtering, submission rate limits, or manual verification steps to keep the ecosystem functioning.

The next thing to watch is how Apple responds — whether it adjusts bounty program rules or adds verification steps, and whether other vendors follow with similar defenses.