Apple is set to launch its new Private Cloud Compute service, which builds upon its existing on-device AI model known as Apple Intelligence to enable more intensive AI tasks while ensuring user privacy. As part of this significant rollout, Apple is making substantial financial rewards available through its bug bounty program to security researchers who can identify vulnerabilities in the new cloud system. This initiative underscores Apple’s commitment to user privacy and security by investing in the expertise of independent researchers to strengthen its infrastructure.
Researchers have the opportunity to earn up to $1 million for discovering exploits that allow malicious code to run remotely on the servers of the Private Cloud Compute service. Additionally, exploits that could potentially leak sensitive user information or AI prompts submitted to the cloud can yield up to $250,000. Even for less critical, yet still significant, security issues, such as those impacting user data from a privileged network position, bounties of up to $150,000 are available. This tiered reward structure reflects the varying levels of risk and importance associated with different types of vulnerabilities.
Enhancing Security and Privacy
Apple is gearing up to introduce its new Private Cloud Compute service, expanding on its existing on-device AI model, Apple Intelligence, to handle more complex AI tasks while maintaining user privacy. This significant release is accompanied by substantial financial incentives in Apple’s bug bounty program, aimed at security researchers who can find vulnerabilities in the new cloud system. This move highlights Apple’s dedication to user privacy and security, leveraging the expertise of independent researchers to enhance its infrastructure.
Researchers have the chance to earn up to $1 million for identifying exploits that allow malicious code to run remotely on the Private Cloud Compute servers. In addition, vulnerabilities that could expose sensitive user information or AI prompts submitted to the cloud can earn up to $250,000. Even less critical, yet still crucial, vulnerabilities impacting user data from a privileged network position can bring in rewards of up to $150,000. This tiered reward structure illustrates the varying levels of risk and importance linked to different types of security flaws, underscoring Apple’s commitment to robust user data protection.