Loading story…
Apple quietly changed its security report intake in June 2026 to limit how many active vulnerability submissions some researchers can keep open at once, after a wave of AI-assisted reports increased triage pressure and included many claims the company considered low-quality or nonexistent. The company now requires human validation before confirming submissions, allows researchers to request higher limits, and is also using AI internally to help process incoming reports. Apple’s bug bounty rules already warn that repeated ineligible or theoretical AI-generated submissions can trigger a 180-day suspension or permanent removal from the program.
The policy drew attention after Italian security startup Bynario said its Atlas platform, using GPT-5.5, identified more than 50 possible flaws in the latest macOS release within three weeks, but the cap initially prevented it from submitting all findings. Apple and Bynario both acknowledged that at least one report was valid: CVE-2026-43760, a macOS Screen Sharing flaw that could allow an authenticated VNC user to access protected data and create files with root privileges, later fixed in macOS Tahoe 26.6. The dispute has highlighted a broader industry problem as AI speeds up vulnerability discovery faster than vendors and bug bounty platforms can review reports, raising concerns that blunt submission limits could also delay legitimate disclosures.
See the reporting duties and controls this puts on the clock.
8 events from the most recent confirmed update back to the earliest known activity.
AppleInsider reported reproducing the Hide My Email behavior on July 17, 2026, two weeks after Apple’s claimed patch date. The report suggested the issue persisted despite Apple’s statement that it had been fully resolved.
Apple said it deployed a patch for the Hide My Email vulnerability on July 3, 2026, and fully resolved the issue. This followed roughly a year of exchanges after the original report.
In June 2026, Apple changed its security report submission system to limit how many active vulnerability reports a researcher can have open at once. The move followed a surge of AI-assisted submissions, many reportedly low-quality or describing nonexistent issues.
EasyOptOuts co-founder Tyler Murphy reported a vulnerability in Apple’s Hide My Email feature to Apple in June 2025. The bug could expose real email addresses that the feature was intended to protect.
Apple introduced Memory Integrity Enforcement in 2025. Later reporting cited researchers using Anthropic’s Mythos model to identify a bypass of this technology.
Apple fixed CVE-2026-43760 in macOS Tahoe 26.6. The flaw in macOS Screen Sharing could allow an authenticated VNC user to access protected data and create files with root privileges.
After reaching Apple’s new limit for open investigations, Bynario said it was unable to submit all of its macOS findings, including initially one valid issue. Apple later contacted Bynario to review its reports.
Within three weeks in 2026, Italian cybersecurity firm Bynario used ChatGPT/GPT-5.5 via its Atlas platform to identify more than 50 potential vulnerabilities in the latest macOS release. The findings reportedly included a possible privilege-escalation chain and a Screen Sharing issue.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
4 references tracked. Mallory keeps watching after this page renders.
bitdefender.com
Open sourcemacrumors.com
Open sourcethenewstack.io
Open sourcecyberveille.ch
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Security teams are struggling to keep pace as AI accelerates vulnerability discovery, bug bounty submissions, and pentest findings faster than organizations can validate and remediate them. Microsoft said it paid more than **$20 million** to **562 researchers** for **2,531** eligible reports across 15 bug bounty programs, attributing a surge in submissions in part to AI-assisted research, while Cloudflare said it now uses Anthropic’s Claude Sonnet to triage bug bounty reports, filtering duplicates and routing only higher-value submissions for human review. Survey data from Pentest-Tools.com similarly found that AI-generated findings are creating large validation backlogs, with practitioners citing false positives, duplicate reports, unexploitable issues, and even fabricated CVEs as persistent problems. The operational gap is widening as attackers move faster than defenders can patch. Dataminr reported a median patch time of **43 days** versus an average attacker breakout time of **29 minutes**, and ZDNET described an ecosystem-wide surge in flaws across major vendors and open source projects, including high-volume bug discovery in Chrome, Apple platforms, and the Linux kernel. Open-source maintainers are also tightening disclosure processes under strain: GNOME reduced its disclosure deadline from **90 days** to **30 days** for new reports and said it would stop forwarding reports to projects that ban AI-generated content. Across the industry, the trend is pushing CISOs toward exploitability-based prioritization, stronger triage workflows, and selective automation rather than relying on raw finding volume alone.
Aug 31, 2026
Security teams and bug bounty programs are confronting a rise in AI-generated vulnerability submissions that appear technically credible but often cite nonexistent functions, commits, CVEs, attack paths, or impacts without reproducible evidence. The low cost of producing these reports shifts substantial verification work to expert triagers; curl, Node.js, and Hibernate have been cited as affected projects. HackerOne and Bugcrowd are responding with reputation, workflow, and machine-learning-based filtering, while valid AI-assisted discoveries still require concrete data-flow analysis and a working proof of concept, as demonstrated by `CVE-2024-10099` and `CVE-2024-10131`. Chrome's Security Team has published procedures for an anticipated influx of AI-generated reports in its internal processes and Vulnerability Rewards Program. It directs teams to fix S0 issues within one week and S1 issues within four weeks, initially handle reports lacking proof-of-concept code as security bugs, define security boundaries in `SECURITY.md`, and use invalid-report decisions as AI training and evaluation data. AI-generated findings receive the same disclosure treatment as human submissions, with publication 30 days after a fix, while the guidance also covers duplicates, disabled features, external dependencies, and rapid mitigations such as replacing renderer-reachable `DCHECK` assertions with `CHECK` assertions.
Sep 23, 2026
Apple issued annual security updates across its operating systems, patching **261 vulnerabilities**—its largest annual remediation total reported to date. The fixes span the Kernel, WebKit, SMB, CUPS, ImageIO, SceneKit, Disk Images, and privacy and sandboxing services. Documented impacts include arbitrary code execution, root or kernel privilege escalation, memory disclosure and corruption, sandbox escapes, Gatekeeper and privacy-control bypasses, data exposure, and denial of service through malicious web content and files, network shares and servers, accessories, or local applications. iOS 27 fixes more than 100 vulnerabilities, while the security-only iOS 26.7 update fixes more than 80, including 75 issues shared with iOS 27; this gives organizations deferring the iOS 27 upgrade a path to remediate many of the same risks. Notable issues include a kernel flaw through which a malicious application could obtain root privileges and a Bluetooth flaw that could permit remote code execution. Apple also released macOS Tahoe 26.7 and macOS Sequoia 15.8 for systems remaining on older macOS versions. No vulnerabilities are known to be actively exploited, but published technical details heighten exposure for unpatched devices; Apple credited Anthropic Claude for three fixes and recognized OpenAI Codex Security.
Sep 17, 2026