Apple has expanded its bug bounty program by doubling the maximum reward to $2 million for reporting zero-click remote compromise vulnerabilities, with potential payouts exceeding $5 million through bonuses. The program, which has awarded $35 million since its inception in 2020, also introduces new categories and increased rewards for various types of attacks, aiming to incentivize security researchers to report critical vulnerabilities. Additionally, Apple plans to distribute secured iPhone 17 devices to civil society organizations at risk of spyware attacks in 2026.
Apple is facing criticism for its new ad campaign that features a fictional "blue screen of death" (BSOD) scenario, which mocks Windows PCs. The ad has sparked discussions about the accuracy and implications of such comparisons, especially given that the BSOD is a notorious issue for Windows users. CrowdStrike, a cybersecurity firm, has also commented on the ad, emphasizing the importance of security over operating system branding.