Apple and the invisible wolf: AI slop drowns real security threats

The Times details an Italian company called Bynario, which identified a fairly nasty-sounding privilege escalation chain that lets attackers take complete control of a Mac. The company also reported a second bug, CVE-2026-43760, a macOS Screen Sharing flaw that allowed an authenticated VNC viewer to access protected data and create files with root privileges.

Unfortunately, the hard-working research team was unable to report the first bug, as it had filed more than 50 reports in just three weeks thanks to AI. In other words, it’s possible some security researchers right now are unable to file warnings of critical vulnerabilities to Apple because the system is overwhelmed by slop.

This is not just an Apple problem

What makes this far more problematic is that it isn’t just Apple that is affected – security teams on multiple platforms are grappling with the same problem. Rafe Pilling, a security expert at Sophos, told the FT that bug bounty programs across the industry have had to shift from finding vulnerabilities to validating reports of them “at machine speed.”

About Author

AndyC

Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.

See author's posts