Crypto
Home›Crypto›Regulation›Apple caps macOS bug reports after AI submissions floo…
Apple caps macOS bug reports after AI submissions flood portal
A Milan startup says it discovered a privilege escalation chain that could enable full control of a Mac, but could not submit it due to Apple’s new reporting cap.
Apple has introduced new limits on how many macOS vulnerability reports a researcher can have open at once after its security team was overwhelmed by AI generated submissions that can invent flaws, according to the Financial Times as cited by Decrypt.
Decrypt reports that Milan-based cybersecurity startup Bynario used OpenAI’s ChatGPT to identify more than 50 macOS bugs in three weeks, including a privilege escalation exploit chain that could give an attacker unrestricted control of a Mac.
Bynario told the outlet it could not file the exploit chain because Apple had already refused further submissions, and CEO Alfredo Pesoli estimated the chain’s value on the criminal market at about $100,000 to $200,000.
Apple says it is now in contact with the firm and reviewing its work, and that it adjusted the number of new reports researchers can have open while allowing researchers to request higher limits; Apple also credited Anthropic and OpenAI software with surfacing flaws in recent security updates, with fixes around five times a normal cycle, Decrypt reports.