Apple says it received its first FBI tip via Vulnerability Equities Process on April 14; vulnerability already fixed on iOS9 and El Capitan
Apple says FBI gave it first vulnerability tip on April 14 — The FBI informed Apple Inc of a vulnerability in its iPhone and Mac software on April 14 …
Context & Ripple Effects
This disclosure lands in the middle of the Apple-FBI standoff: weeks after executives argued that newer iPhones were exposed to the same 'back door' the FBI requested, and days after reports that Apple was building a security upgrade designed to make the FBI's unlock method fail, the company now reveals the bureau used the Vulnerability Equities Process for the first time.
The substance of the tip is thin — Apple says the flaw was already fixed in iOS 9 and OS X El Capitan before April 14 — so the significance is procedural rather than technical: the FBI chose to route what it knew through formal disclosure instead of holding it, while the two sides fought in court.
First-order effects
- Apple gains a talking point that cuts against the 'FBI hoards exploits' narrative: its first-ever VEP tip concerned a vulnerability already patched on iPhones and Macs running iOS 9 and El Capitan.
Second-order effects
- If VEP tips become routine, the FBI's stockpile of unpatched Apple flaws shrinks — directly relevant to Apple's reported effort to close off the FBI's current exploit path in future software updates.
Third-order effects
- Formalized disclosure could become standing practice between law enforcement and device makers even during encryption fights, though the later discovery of actively exploited zero-click iOS flaws shows vendor patching alone has not closed the attack surface.
The trend: Government-to-vendor vulnerability disclosure is being institutionalized at the same time as the legal battle over compelled access, making the equities process the quiet counterweight in the encryption debate.