Apple Limits Security Report Submissions Amid AI-Generated Flood

• •Apple has capped the number of concurrent vulnerability reports researchers can submit.
• •The new policy was implemented due to a surge of low-quality AI-generated reports.
• •Bynario, an Italian startup, reported over 50 vulnerabilities but faced submission limits.

On August 2, 2026, Apple Inc. announced new restrictions on the number of concurrent security vulnerability reports that external researchers can submit. This decision was made in response to an overwhelming influx of AI-generated reports, many of which contained inaccuracies or flagged non-existent vulnerabilities. Effective since June, the new policy limits researchers to a certain number of open submissions and imposes a 30-day waiting period for additional reports. Italian startup Bynario, which utilized AI to identify over 50 potential vulnerabilities in macOS, has been notably affected by these limits. While Apple aims to maintain rigorous security standards, the cap could hinder the reporting of critical vulnerabilities. The company has indicated that researchers can request an increase in their submission limits for urgent findings. Apple is also employing AI to help manage the review process for incoming reports. The situation highlights the dual-edged nature of AI in cybersecurity, where it can both aid in vulnerability discovery and create significant operational challenges.