Security researchers accuse Apple of ignoring three major vulnerabilities in iOS 15

      In 2019, Apple opened its security bounty program to the public to encourage researchers to submit security vulnerabilities affecting iOS, iPadOS, macOS, tvOS, or watchOS to the official.

　　By offering a million-dollar bounty, Apple hopes this move will ensure the security of its own software platform. Even so, many security researchers have complained about the official's poor execution and long-term disregard for the three zero-day vulnerabilities that still exist in iOS 15.

　　Kosta Eleftheriou pointed out in a blog post: The unnamed security researcher said that they reported four zero-day vulnerabilities to Apple between March and May this year.

　　But except for one vulnerability that has been fixed in iOS 14.7, the other three still exist in the latest iOS 15.0. The official's perfunctory attitude really made them feel a loss of trust.

　　What’s even more speechless is that Apple did not list it on the security content page, but chose to cover up the vulnerability that it fixed in iOS 14.7. When confronted with the company, the other party apologized, promised to deal with this issue, and promised to list it in the next version update.

　　In response, Apple said it would pay attention to the researchers' suggestions and resolve the corresponding vulnerabilities in a timely manner.