Apple declined to issue a bug bounty to the Russian cybersecurity company Kaspersky Lab after it disclosed four zero-day vulnerabilities in iPhone software that were allegedly used to spy on Kaspersky employees as well as Russian diplomats.
A spokesperson for Kaspersky Lab told Recorded Future News that the company’s research team considered their work “eligible for Bug Bounty rewards from Apple. However, when asked about it, we received a decline from the Apple Security team referring to the dedicated policy.”
Apple did not provide a comment when contacted by Recorded Future News. Bug bounties are a common way for companies to encourage researchers to disclose vulnerabilities to them instead of monetizing them by selling them to malicious actors that might exploit them.
![[correlate]](/data/avatars/s/79/79653.jpg?1556985072){kind=avatar}