Apple Launches ‘Apple Intelligence’ and Offers $1M Bug Bounty for Security

Apple unveils ‘Apple Intelligence’ for iPhone, iPad, and Mac devices while offering a $1 million bug bounty for cybersecurity experts to find flaws in its Private Cloud Compute servers, enhancing privacy and AI security on iOS and macOS.

Apple today unveiled its highly anticipated AI-powered service, Apple Intelligence for iPhone, iPad, and Mac. This service, set to arrive with iOS 18.1, iPadOS 18.1, and macOS Sequoia 15.1, combines on-device processing with powerful cloud-based computing to handle complex AI tasks.

A preview of writing tools powered by Apple Intelligence

To ensure the security of these cloud-based systems, Apple has introduced a comprehensive bug bounty program. The tech giant is offering a reward of up to $1 million to security researchers who can successfully identify and exploit vulnerabilities in its “Private Cloud Compute” servers.

These servers, specifically designed for Apple Intelligence, are responsible for processing intensive AI tasks that cannot be handled by individual devices. This initiative is designed to strengthen the security of the Private Cloud Compute (PCC) servers that will underpin this service. The PCC servers, which will handle certain AI-powered tasks, are a critical component of Apple Intelligence.

“We believe Private Cloud Compute is the most advanced security architecture ever deployed for cloud AI compute at scale, and we look forward to working with the research community to build trust in the system and make it even more secure and private over time,” Apple stated in its official statement.

Apple has taken significant steps to prioritize user privacy and security. To further strengthen trust, Apple has also opened up a Virtual Research Environment (VRE) to researchers and security enthusiasts.

The VRE provides access to the PCC software, allowing individuals to scrutinize its code and identify potential vulnerabilities. This allows them to scrutinize the system’s security measures and identify potential weaknesses.

The iPhone maker has also published a comprehensive security guide, detailing the intricacies of PCC’s security architecture and how it protects user data. This guide, coupled with the VRE, provides a robust platform for security researchers to delve deep into the system and uncover potential weaknesses.

The program offers a range of rewards, including $50,000 for accidental or unexpected data disclosure, $100,000 for uncertified code execution, $150,000 for access to user request data or sensitive information outside the trust boundary, and $250,000.

Additionally, $1,000 for arbitrary code execution without user permission or knowledge. Apple also promises to consider awarding money for any security issue that significantly impacts PCC, even if it doesn’t match a published category.

By offering a substantial reward for critical vulnerabilities, Apple is encouraging the global cybersecurity community to contribute to the security of its AI infrastructure. The company is particularly interested in vulnerabilities that could compromise user data, execute code without permission, or exploit system design flaws.

By inviting the security community to scrutinize its infrastructure, Apple is also showing a commitment to transparency and security. To learn more about Apple Bug Bounty Program visit this link.

1. Google Launches $250,000 kvmCTF Bug Bounty Program
2. OpenAI Launches $200 to $20k ChatGPT Bug Bounty Program
3. When Ethical Hackers Saved Companies from Devastating Hacks
4. Multichain hack: Hacker returns $1m, keeps $150k as bug bounty
5. A 19-year-old ethical hacker is a millionaire now; thanks to his skills