Schneier on Security

Clive Robinson • October 20, 2026 11:47 AM

@ Brian Scott, Bruce, ALL,

You note,

<

blockquote>”… but Apple has it patched… ”

<

blockquote>

But what else do they not have patched?

The rate AI is finding not just bugs but exploitable vulnerabilities in peoples executable code, I would expect many serious vulnerabilities in Apple’s code.

Vulnerabilities that are “not known” to Apples Management and developers, so are,

“Zero days or earlier just waiting for discovery and exploitation.

Now ask yourself a question,

“If you had discovered a serious vulnerability in Apple Code, that you had developed a “Proof of concept exploit” code for…

What is it worth?

Some organisations are paying millions of dollars for iPhone Exploits.

What does Apple pay as a bug bounty…

Some years back now a battle cry of,

No more Free Bugs was the cry

And still senior managers and directors think that those doing “responsible disclosure” should have prosecutions pushed onto them…

One result as Microsoft found out is people develop a bitter hate and they repeatedly push “working exploit” code into the public arena to show how incompetent the senior decision makers are.