Apple has imposed strict limits and a 30-day cool-off period on its bug bounty submissions after being overwhelmed by low-quality, AI-generated vulnerability reports that often describe non-existent flaws. This surge in automated, plausible-sounding but false reports risks causing serious exploits, like a critical macOS zero-day, to be delayed or missed. Apple and other companies are now balancing the challenge of filtering AI slop from genuine security findings to protect their software effectively.
https://www.bitdefender.com/en-us/blog/hotforsecurity/apple-bug-bounty-ai-missing-exploits