Apple web server security acknowledgements

Apple publishes this article to acknowledge and thank those who reported potential security issues in our web servers. Credit is added after the issue has been identified and addressed.

For Apple web server security acknowledgements from previous years, see the end of this article.

Credits

July 2025

• @Youssef Desouki

• Aaron Perris (@aaronp613)

• Abdulaziz Alzahrani

• Ali Toni

• Ariel Rachamim

• Atul Nagaraj Nambiar

• Ben McEwan

• deepak deepak

• Harshita Bhatia | Yukti Ghablani | Chinmay Raj Pandey

• Heitor Gouvêa

• Hemant Patidar

• Hussein Daher

• Itachi22 and PwnForCard

• Joel Verghese (@krizzsk)

• Kürşad ALSAN @kursadalsan

• Lam Scun

• LawSoul from SentinelX ( SSC - Cyber Security Unit - CMC Telecom)

• Lehan Dilusha Jayasingha ( Sri Lanka)

• lud v1k

• Mahmoud Samaha (Hackerone:0x4m)

• Mahmud Hasan Sizan

• Mohamed Tarek

• mohd haji

• MUHAMMAD ZAID GHIFARI { Mr.ZheeV } || Kalimantan Utara ||

• Namita Dhekula

• Nguyen Van Hung (Itachi22) from SentinelX (Cyber Security Unit - CMC Telecom - RedTeam)

• p4fg

• Ravee Dandage

• Richard Hyunho Im (@r1cheeta)

• Rio Mulyadi Pulungan

• Rohit Sharma (r0x5r)

• Shivansh Khare

• Shubham Singh

• Sourav Newatia

• suga

• Yunus Oyetunde

• देवेन्द्र (@raoshaab)

June 2025

• abdellah kouba (@koubaabdellah)

• ABDUL RAZACK KT

• abidakun samuel

• Aderonmulo Ariyo (Mudhaxk)

• Aditya Alfikri

• AKHIL C D (@akhil-c-d-661abb292) || INDIA

• Alex Bas (@phr0ph)

• Alexandre Araújo (@xande_araujo) - RaDiTZz

• Atul RV

• Bryce Kwon

• Buduru Naveen

• Colin J Cohen

• Devansh Chauhan (Threatvapt)

• facemayne

• Gaurav Bhatia

• Gerson Aldaz

• hamza sais

• Hasnain Ghoghari

• Ithrael

• Jason of Null Consolidated

• junaid farhan

• k3mlol

• LawSoul from SentinelX (SSC - Cyber Security Unit - CMC Telecom)

• Leandro Chaves

• Mahmoud Samaha (0x4m)

• MD Sagor Hossain

• Mohd Hasan Ansari aka Jerry1319

• Muataz Hasan

• Muthu D

• Nguyen Van Hung (Itachi22) from SentinelX (Cyber Security Unit - CMC Telecom - RedTeam)

• Peter Goldsmith

• Pradipta Das

• Raghuram Gopalakrishnan

• Rajdip Dey Sarkar

• Samet Gozet

• SOUHAIB NACERI

• Sourav Newatia

• taha elias

• todayisnew / @codecancare

• Valdrin Haliti – Student, Universum College, Ferizaj, Kosovo

• Vikas Anil Sharma

• Vivek Goswami And Rohti Kamble

• zano_security(tech_talent)

• Zoltán Dr. Kulcsár

May 2025

• @Youssef Desouki

• 0xdln

• Abd-Hakeem Akinlawon

• Abdelrahman Ibrahim Farg

• ABDUL RAZACK KT

• Achraf Battou (@40rbidd3n)

• Ahmed Adel Abdelfattah

• Ajay Kakasaheb Pandit

• Alan Jose

• Asaf Afruzfar

• Curtis Carmony from Palo Alto Networks

• d0xing

• Daniel "V" Morais

• Devansh Chauhan

• Dinar Guluzada

• Dmytro Shedin

• Drake Jordan

• Filbert Alfredo Saputro

• Furkan Semiz

• Guillermo Gregorio

• Jaydev Ahire

• Kiril Krivoguz

• LawSoul from SentinelX ( RedTeam - Cyber Security Unit - CMC Telecom)

• Maikel Zweerink

• Marc-Oliver Munz (@marcolivermunz)

• Marco Lopes

• Mindaugas Liudavičius

• moein abas

• mohammed abdelmeguid

• Namita Dhekula

• Nathan Accacio (mor1arty)

• Nguyen Van Hung (Itachi22) from SentinelX (Cyber Security Unit - CMC Telecom - RedTeam)

• null1433

• Pacman255

• Piotr Liśkiewicz (@nch3)

• Raagul Vignesh R

• SaifAllah benMassaoud

• Salih Dumlu

• Samarth Pohekar

• Sameer Rathod

• Sourav Newatia

• Thai Vu

• Tianhao Yang

• todayisnew / @codecancare

• Vansikha Singh

• ytaufiq

• Yunus Oyetunde

April 2025

• 0xdln

• Aderonmulo Ariyo (Mudhaxk)

• Alex Bas (@phR0ph)

• Alex C.

• Alexandre Araújo (@xande_araujo) - RaDiTZz

• Andrew Goldberg of The McCombs School of Business, The University of Texas at Austin

• Aravind S

• Asadul Islam

• Buduru Naveen

• Farras Givari

• Filip Bukovina

• Frederik Schwan

• hamza sais

• Husain Saleem

• iman Gurung

• J. Domingo Carrillo Lencina

• Jayanth K Atreya and Subiksha M (AKATI Sekurity)

• Jesse Nolan of Jamf Software

• Joel Verghese (@krizzsk)

• Joseph Chekanoff

• Kenta Okumoto

• keshav yadav

• Kiril Krivoguz

• LawSoul from SentinelX ( SSC - Cyber Security Unit - CMC Telecom)

• Lucas de Souza Silva (lucsouza)

• Martin van Wingerden

• MIN YOONGI

• Nguyễn Hoàng Minh (sn00py_z0r0), tuntin9x

• Nguyen Van Hung (Itachi22) from SentinelX (Cyber Security Unit - CMC Telecom - RedTeam)

• Niraj Mahajan

• Pethuraj M

• Rizki Maulana

• Shahariar Salman Shahed

• Utsavpari Gosai

• Vijay Kumar Chippa (Coforge)

• Yunus Oyetunde

• 陳宥升(CheN..)

March 2025

• Abdelrahman Ibrahim Farg

• Abhishek Pal

• Aditya singh ( @aditya-singh4180 )

• Adrian Tirado

• Akshay raj

• Anonymous M

• Artan Mulhaxha

• Ashkan Shahabi (@ashbi)

• Ashwin Gupta

• ayamkambing

• Azam Gassim Osman Abdalmahmoud ( @azam_gassim )

• Ben Lesser

• Ben McEwan

• blinxsstest123

• Buvaneshvaran K (@iambuvanesh)

• Collin Potter

• Dung Le (LTiDi) of FlySec

• Greg Long

• HIMURA KENSHIN

• inuma cybersecurity

• ismail Şentürk

• jaykant

• Jivan Magare ( Solo )

• Jon Colston (mayonaise)

• Josekutty Kunnelthazhe Binu

• karan kadu

• keshav yadav

• Khalafallah Altayeb Mohammed

• khoadha (Viettel Cyber Security)

• Kyaw Min Thein

• Leandro Chaves

• Mohd Hasan Ansari aka Jerry1319

• Oliver Schulz

• Rona Febriana

• Sabarinath Panikken

• Sagar Yadav ( @sagaryadav8742 )

• salah eddine louffidi

• Shivam Dhingra

• SOUHAIB NACERI

• Sourabhkumar Mishra

• ThanhLam17, Tuntin9x (Red Team - VNCS Global)

• Triffin Augustine ( TrffnSec )

• tuo4n8 (Verichains Cyber Force)

• Utsavpari Gosai

• Vishal Vishwakarma

• Yasser Ezzat (@YasserGersy)

• Yunus Oyetunde

February 2025

• Abbas Hamzayev

• Ahmed Alwardani of Sirar by stc

• Ahmed Yasser (kamananaa)

• Alex, Tuntin9x (Red Team - VNCS Global)

• Alex Bas (@phr0ph)

• Aryawardhan Singh (0x2458)

• Asadul Islam

• Chirag Saini

• cyal1 (@zenmen)

• d0xing

• Daniel Nogueira D'Aquino Fonseca

• Dimitrios Vlastaras

• Dung Le (LTiDi) of FlySec

• Frans Rosén (@fransrosen)

• hamza sais

• Harshad Subhash Pawar

• Ithrael

• José Pedro Pereira Junior

• Kirtikumar Anandrao Ramchandani

• LamBui, Tuntin9x (Red Team - VNCS Global)

• Mahmoud Samaha

• Mohd Haji

• Namita Dhekula

• Ngọc Hoa Lê

• Nguyen Van Hung (Itachi22) from SentinelX (Cyber Security Unit - CMC Telecom - RedTeam)

• Ori Levi & Maor Dayan

• Pablo García Pérez

• Rıza Sabuncu - Buğra Eskici

• Sakil Hasan Saikat

• Santhosh Kumar

• Sergen Koç

• Sourav Newatia

• Sriharan Mahendran

• tea tsjs

• Thai Vu

• Trần Đức Khiêm

• Vaibhav Jain

• Vaishali Thakur

• Vikas Anil Sharma ( Agilehunt - Guarding your innovation )

• Vishal kumar

• Yunus Oyetunde

• Zaid Mountacir

• 晴天组织<舞舞舞>@dukang

January 2025

• 0xdln

• Ahmed Yasser (kamananaa)

• Ananta Nadapara & Snehil Shourya

• Ashish Rai

• Biswajeet Ray

• Chan Nyein Wai

• Charan Kumar J

• d0xing

• Devansh Chauhan (@devanshchauhan_)

• Frans Rosén (@fransrosen)

• Hamza Sais

• Hashim Al-Jabery

• Ivarsatierf -- @rvsatierf

• Khiem Tran (@duckhiem)

• Kislay Kumar

• Kürşad ALSAN @kursadalsan

• Kush Sehra (@infosec1999)

• LawSoul from SentinelX ( RedTeam - Cyber Security Unit - CMC Telecom)

• Leandro Chaves

• Manthan Mahale

• Miguel Segovia Gil from EY GDS

• Mohammad Kaif (mkahmad | kaif0x01)

• Mohd Hasan Ansari aka Jerry1319

• Muthu D

• nader jendoubi

• Nguyen Van Hung (Itachi22) from SentinelX (Cyber Security Unit - CMC Telecom - RedTeam)

• Nilabh Rajpoot

• Nilesh Agrawal Koyo

• Parag Bagul

• Pruthu Raut

• Salah Eddine Louffidi

• Shivam Sharma (@Comrade)

• Sourav Newatia

• Subham Chatterjee

• Subhi Abualsayed

• todayisnew / @codecancare on Twitter

• Vedavyasan S (@ved4vyasan) Of CAS (IHRD) KOTTARAKKARA

• Vikas Anil Sharma

• Vishal Vishwakarma

• Vivek Goswami

• Yunus Oyetunde

• देवेन्द्र (@raoshaab)

Apple web server security acknowledgements from previous years

• Apple web server security acknowledgements, 2023-2024

• Apple web server security acknowledgements, 2021-2022

• Apple web server security acknowledgements, 2019-2020

• Apple web server security acknowledgements, 2017-2018

• Apple web server security acknowledgements, 2016

• Apple web server security acknowledgements, 2015

• Apple web server security acknowledgements, 2014

• Apple web server security acknowledgements, 2013

• Apple web server security acknowledgements, 2012

• Apple web server security acknowledgements, 2011

• Apple web server security acknowledgements, 2005-2010