what is the apple bug that was exploited by the security expert

Security Expert Accused of Scamming Apple Out of $2.5 Million

Noah Roskin-Frazee, a security expert at ZeroClicks Lab, has been accused of exploiting a loophole in Apple's system to scam the company out of $2.5 million. Roskin-Frazee, who had previously been recognized by Apple for his help in finding software issues, allegedly used his knowledge to defraud the company.

The scam involved fraudulent orders via Apple's Toolbox system, with the defendants obtaining around $2.5 million in electronic gift cards and over $100,000 in products and services. This case has raised concerns about the trust placed in security experts, who are expected to keep systems secure, not exploit them for personal gain.

The indictment mentions that the defendants changed order values to zero, added products to existing orders, and extended service contracts. The alleged fraud took place from January to March 2019, and the defendants are facing charges in California.

This incident serves as a reminder of the potential risks associated with insider threats and the importance of robust security measures to prevent such exploitation.