A new US$500,000 iOS bug bounty beats Apple's offer

Security firm Exodus Intelligence will give between $5,000 and $500,000 for zero-day vulnerabilities relating to iOS

A security firm is offering up to US$500,000 for information on zero-day vulnerabilities in iOS, surpassing Apple's bug bounty just days after it was announced.

On Tuesday, Texas-based Exodus Intelligence said it will give between $5,000 and $500,000 for zero-day vulnerabilities relating to iOS version 9.3 and higher.

These zero-days are software flaws that have gone undetected by Apple, making them potentially very valuable, especially for cyber criminals who can use them to hack iPhones.

Exodus’s announcement might draw interest away from Apple’s own bug bounty program, which was unveiled last week.

Apple is giving as much as $200,000 for critical vulnerabilities in iOS. To ensure it receives quality results, Apple initially is only inviting a few dozen security researchers to participate. That doesn’t mean Apple will turn away other researchers. Non-invitees can also submit vulnerabilities to the company and receive a reward.

It’s the first time Apple has announced a bug bounty program. Other tech giants including Google and Microsoft have offered them for years as a way to encourage hackers to turn over bugs rather than sell details of them to bad actors.

However, zero-day vulnerabilities are also valuable to private security companies. Exodus Intelligence makes its business by alerting clients of critical threats before the software providers and hackers even know of them.

hitlist Exodus Intelligence

The company claims it can warn clients of the flaws up to two years in advance. Its bug bounty program is also offering rewards for zero-day vulnerabilities relating to Google Chrome and Microsoft’s Edge browser.

Exodus Intelligence isn’t the only private security firm to offer a high bounty for bugs. Last year, Zerodium said it would pay out $1 million for an exclusive, browser-based way to compromise Apple’s iOS.

The reward has expired, but Zerodium still offers $500,000 rewards for zero-day vulnerabilities relating to iOS.

These flaws can also be useful to law enforcement authorities. For example, the FBI reportedly paid hackers to use an unknown iOS flaw to access a terrorist's locked iPhone.

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Michael Kan

IDG News Service
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Kurt Hegetschweiler

Brother PocketJet PJ-773 A4 Portable Thermal Printer

It’s perfect for mobile workers. Just take it out — it’s small enough to sit anywhere — turn it on, load a sheet of paper, and start printing.

Matthew Stivala

HP OfficeJet 250 Mobile Printer

The HP OfficeJet 250 Mobile Printer is a great device that fits perfectly into my fast paced and mobile lifestyle. My first impression of the printer itself was how incredibly compact and sleek the device was.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?