Artificial intelligence is assisting security researchers in identifying software vulnerabilities, creating a fresh challenge for Apple. The iPhone maker is now reportedly capping the number of active security reports each researcher can maintain at once following a wave of AI-assisted submissions. These AI tools are generating both valid and inaccurate Mac vulnerabilities. Apple is said to be deploying AI to help prioritize incoming reports, though human experts continue to review them.

Apple Caps Bug Reports

As reported by the Financial Times, AI-generated bug reports have led Apple to restrict security submissions. The publication, citing cybersecurity firm Bynario, notes that the firm identified more than 50 potential security flaws in Apple's macOS operating system within three weeks, including a privilege escalation chain that could enable attackers to seize full control of a Mac.

Bynario, using its Atlas security platform powered by GPT-5.5, reportedly uncovered a flaw in macOS Screen Sharing. The vulnerability permitted an authenticated Virtual Network Computing client to access protected data and create files with root privileges under certain conditions. This issue impacted systems where Screen Sharing or Remote Management were enabled alongside legacy VNC password authentication. Apple later assigned the flaw as CVE-2026-43760 and resolved it in its macOS Tahoe 26.6 update.

Bynario has reportedly created a working exploit that showed how the flaw could be leveraged to run commands with root privileges. It reportedly submitted the exploit to Apple, aiding its engineers in reproducing the issue and confirming a fix.

These latest findings highlight AI's growing role in uncovering vulnerabilities more rapidly. The Cupertino-based company reportedly noted that researchers are using Claude and OpenAI Codex Security to locate flaws in macOS and WebKit. The AI accelerates vulnerability discovery, but Apple still requires manual verification of each report before issuing a fix.

Apple has reportedly updated its bug bounty programme to accelerate this verification process with rewards exceeding $5 million for the most critical exploit chains. The programme also features Target Flags to assist researchers in supplying stronger proof of exploits.