In a bid to enhance the security of its upcoming Apple Intelligence service, Apple has announced a bug bounty program offering rewards of up to $1 million to hackers who can identify vulnerabilities in its servers. The program aims to rigorously test the security of Apple’s Private Cloud Compute (PCC) service, which will process certain Apple Intelligence requests2.
The bug bounty program invites security and privacy researchers, as well as anyone with technical curiosity, to test the system and report any potential security flaws. Rewards are offered for various threat categories, including accidental data disclosure, external compromise from user requests, and physical or internal access vulnerabilities1. The highest bounty is reserved for exploits that enable malicious code execution or unauthorized access to sensitive user data.
Apple hopes this initiative will build public trust in the system and make it even more secure and private over time. The company is providing extensive resources, including a virtual research environment and access to source code, to support researchers in their efforts1.