TECH Signal 164
Apple introduced a cap and a 30-day cool-off period on bug report submissions, citing a deluge of AI-assisted reports; researchers can request higher quotas (Financial Times)
This is a concrete signal that AI-assisted bug finding is generating enough volume to overwhelm vendor triage pipelines, prompting a defensive throttle rather than process scaling. Engineers who submit legitimate vulnerabilities will face more friction under the new limits, though the exception process for researchers offers a partial workaround. The move could set a precedent for how other vendors respond to automated or AI-generated bug reports.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
Apple introduced a cap on the number of bug reports each submitter can file, along with a mandatory 30-day cool-off period.
The restriction is explicitly motivated by a surge of AI-assisted vulnerability reports that strained Apple's triage capacity.
Researchers can request higher submission quotas, providing a workaround for legitimate high-volume bug finders.
THE CLUSTER
↗