AI-driven abuse forces security changes at Google, Apple and Asus

· Tech · United States · Taiwan

Google froze its open-source bug bounty program after a flood of invalid AI-generated reports, while Apple tightened macOS Full Disk Access controls citing risks from capable AI agents. Asus separately warned that malicious VPN config files can let attackers run commands on its routers.

Why it matters：Shows AI agents and AI-generated reports reshaping vulnerability disclosure and endpoint permissions, affecting how vendors, researchers and users manage security at scale.

Key points

  • Google suspended submissions to its Open Source Software Vulnerability Reward Program.
  • Apple will add controls around macOS Full Disk Access; Meta disputes the need.
  • Asus said not to import untrusted VPN files until routers on 3.0.0.6_102 firmware are updated.

Sources (original reporting)

More stories from this day