$1M Bounty for iPhone Hack
I don’t know whether to believe this story. Supposedly the startup Zerodium paid someone $1M for an iOS 9.1 and 9.2b hack.
Bekrar and Zerodium, as well as its predecessor VUPEN, have a different business model. They offer higher rewards than what tech companies usually pay out, and keep the vulnerabilities secret, revealing them only to certain government customers, such as the NSA.
I know startups like publicity, but certainly an exploit like this is more valuable if it’s not talked about.
So this might be real, or it might be a PR stunt. But companies selling exploits to governments is certainly real.
Another news article.