Fast Facts
-
Increased Rewards: Apple is doubling its top reward for security vulnerabilities from $1 million to $2 million for exploit chains mimicking mercenary spyware attacks, with potential maximum payouts exceeding $5 million for critical bugs.
-
New Reward Structures: Discovering exploit chains requiring one-click interaction can earn researchers up to $1 million, while proximity and device access attacks now also offer increased rewards up to $1 million and $500,000, respectively.
-
Focus on Advanced Threats: Apple’s updated Security Bounty program aims to deter sophisticated cyber threats, particularly from mercenary spyware, by incentivizing more in-depth research into critical vulnerabilities like beta software and Lockdown Mode bypasses.
-
Proven Impact: Since the program’s inception, Apple has awarded over $35 million to 800+ researchers, underscoring its commitment to enhancing security despite evolving tactics from bad actors.
Apple Increases Bug Bounty Rewards to $2 Million
Apple has announced exciting changes to its Security Bounty program. Starting this November, the company will double its top reward from $1 million to $2 million. This increase aims to motivate researchers to discover vulnerabilities similar to those exploited by sophisticated mercenary spyware, particularly those that require no user interaction.
Moreover, the potential payout can exceed $5 million for critical vulnerabilities. These include bugs in beta software and bypasses of Lockdown Mode. Lockdown Mode offers enhanced security in Safari, making it crucial for user protection.
In addition, Apple has adjusted rewards for various attack methods. Researchers can now earn up to $1 million for discovering exploit chains that require one-click user interaction, a significant jump from the previous $250,000. Rewards for attacks needing physical proximity have also increased to $1 million. Furthermore, the maximum reward for accessing locked devices has doubled to $500,000.
Apple’s focus on security is evident. The company has awarded over $35 million to more than 800 security researchers since expanding the program. According to Ivan Krstić, Apple’s VP for security engineering, the company has made multiple $500,000 payouts, though top-dollar rewards remain rare.
Highlighting the necessity of these upgrades, Apple noted that the only observed iOS attacks originate from mercenary spyware. These attacks, often linked to state actors, target specific individuals. As cyber threats continue to evolve, Apple aims to make such attacks more challenging.
The revamped bounty program reflects Apple’s commitment to security innovation. By offering higher rewards, the company hopes to inspire advanced research on critical vulnerabilities. This proactive stance not only benefits Apple users but also contributes to the broader landscape of digital security.
Continue Your Tech Journey
Dive deeper into the world of Cryptocurrency and its impact on global finance.
Access comprehensive resources on technology by visiting Wikipedia.
GadgetsV1
