Apple tightens bug reporting as AI floods security teams

Apple is tightening its bug bounty intake by limiting how many security reports outside researchers can submit at once after a surge of AI-generated submissions overwhelmed its review teams. The move underscores how generative AI is changing cybersecurity operations: it helps researchers and Apple’s internal teams find vulnerabilities faster, but it also floods systems with low-quality or speculative reports that increase workload and costs. Apple is reportedly using AI models, including from OpenAI and Anthropic, to triage reports and prioritize real issues, which has helped produce more security fixes in recent updates. The news is more operational than financial, but it highlights an emerging risk for large software companies as AI raises both the volume of potential threats and the noise around them.