NewsNTech
The constraint in Apple's security review pipeline is triage capacity, not discovery.
Researchers equipped with AI tools are surfacing vulnerabilities faster than Apple's internal team can process them, and the iPhone maker has responded by limiting how many reports a single researcher can submit.
The triage wall behind the policy Bug bounty programs are built around an implicit ratio: the number of incoming reports should stay within the range a security team can actually review.
AI has disrupted that ratio on the discovery side. A researcher running automated analysis can produce candidate vulnerabilities at a pace that would once have required a small team working for weeks.
Keep reading