Apple @ Work: Capping bug bounty submissions is the wrong response in the AI era of security threats

Apple has capped the number of open vulnerability reports researchers can submit through its portal, with a 30-day cool-down period after hitting the cap, citing a surge in AI-generated bug reports flooding the review pipeline. The author argues this is the wrong response at a time when AI-generated security threats are increasing.

Apple @ Work is exclusively brought to you by Mosyle https://mosyle.net/3RDn , the only Apple Unified Platform. Mosyle is the only solution that integrates in a single professional grade platform all the solutions necessary to seamlessly and automatically deploy, manage, and protect Apple devices at work. Over 45,000 organizations trust Mosyle to make millions of Apple devices work ready with no effort and at an affordable cost. Request your EXTENDED TRIAL https://mosyle.net/3RDn today and understand why Mosyle is everything you need to work with Apple . Apple recently confirmed https://9to5mac.com/2026/08/03/apple-caps-security-bug-reports-amid-surge-in-ai-generated-findings/ it has capped the number of open vulnerability reports that researchers can submit through its portal, with a 30-day cool-down period once you hit that cap. The reason is that a surge in AI-generated bug reports is flooding the review pipeline. I understand the instinct, but I think it’s the wrong response at exactly the wrong moment.