Apple's bug bounty program will now have a maximum $1 million payout. The program allows researchers to find bugs or security vulnerabilities, and report them to the company in exchange for money. The information about the increased payout came from the company's head of security engineering and architecture, Ivan Krstić. The $1 million payout will be available to anyone who is able to fully control another person's iOS device, using only a phone number. Researchers can also obtain a 50% bonus depending on which category they are able to control.
Apple's bug bounty program was launched three years ago for iOS devices, and since extended the program to macOS. Devices newly included in the program are Macs, MacBooks, Apple TV as well as the Apple Watch.
What's Driving This Trend
- Increased Bug Bounty Payout
- Companies across different industries can increase bug bounty payouts to incentivize researchers and identify vulnerabilities quickly.
- Device Control
- Companies can offer larger rewards for researchers who uncover vulnerabilities that allow complete control of devices, which can be used to improve security measures.
- Expanded Bug Bounty Programs
- Industries can follow Apple's lead and expand their bug bounty programs to include a wider range of devices and systems.
Who This Affects Most
- Technology
- Technology companies can benefit from increased bug bounty payouts by attracting more researchers and identifying and fixing vulnerabilities more quickly.
- Finance
- Finance companies can improve their cybersecurity measures by offering bug bounty programs that incentivize researchers to find and report vulnerabilities.
- Healthcare
- Healthcare organizations can improve their security measures by creating bug bounty programs, which can help protect sensitive patient data.
