Zerodium Stops Buying iOS Exploits

We will NOT be acquiring any new Apple iOS LPE, Safari RCE, or sandbox escapes for the next 2 to 3 months due to a high number of submissions related to these vectors. Prices for iOS one-click chains (e.g. via Safari) without persistence will likely drop in the near future.

A screenshot of a Zerodium post announcing that it will temporarily stop acquiring new Apple iOS LPE, Safari RCE, and sandbox escape exploits because too many submissions have arrived. The joke is that an unusually large supply of iOS vulnerabilities is lowering their market value, contrasting with the Russian caption’s claim that Zerodium had already been paying more for Android vulnerabilities than for iOS ones.

• @infosecmemes / 258 2020-05-13