Apple publishes this article to acknowledge and thank those who reported potential security issues in our web servers. Credit is added after the issue has been identified and addressed.
For credits from other years, see the end of this article. You can also view recent Apple web server security acknowledgements.
December 2016
Ahmed Abdalla Fathi
Emil Frits Bengtsson of KHS
Er Pratik Panchal of Infobit Technologies
Greg Harris
Jon Bottarini (@jon_bottarini)
Kevin VALERIO (@conslight)
Max Prietzel
Mohammad Abuhassan
Mohammed El Bess
Nadi Abdellah
Nikhil Kumar of Neogrowth Credit Pvt. Ltd.
Patrick Schlangen
Ramin Farajpour Cami
Richard Moulinneuf from SafeRail
Rui Silva
Yogesh Anil Tantak
November 2016
Dane Wachs of Ubiquitous Computing LLC
Juha Suontausta of Telia Company
Kameshwar Thakur
Manish Bhattacharya
Mohamed A. Baset of SAS de C.V. Mexico
Mustafa Hasan (strukt)
Raad Firas Haddad (@raadfhaddad)
Ramin Farajpour Cami
Richard Shupak
Tatsuki Maekawa of Gehirn Inc.
October 2016
@kraken_kall
an Gökay Gündoğan
Djoukhrab Djaber of Kasdi Merbah Ouargla University
Eusebiu Blindu (@testalways)
Marco Cazzaniga
Mourad Benzine
Nicholas R
Tadj Youssouf
Wai Yan Aung (@waiyanaun9)
September 2016
Cameron Dawe of Spam404 (@Spam404Online)
Edwin Foudil
Faizan Ahmad of Fsecurify
Florian Kunushevci
Gerardo Venegas
HexTitan
Ivan Danilov of IPSERVER LLC
Jake Eaton
James262144XD
Joel Noguera (@niemand_sec)
Kenny Hietbrink of Hack-IT
Louis Lang
Matthew Telfer (MLT) of Project Insecurity (@ret2libc)
Michael Stepankin of Positive Technologies (@Artsploit)
Mustafa Hasan of Netsparker
Nicolas Francois of MeoW Sec
Orange Tsai from DEVCORE
Rahul Dattatraya Kankrale (@RahulKankrale)
Rakan Alotaibi (@hxteam)
Sahil Tikoo of Thakur College
Zee Shan (@z33_5h4n)
August 2016
Abdullah Hussam
Alexander Traud
Ayoub Nait Lamine
Brooke Schreier Ganz (@Asparagirl)
Faast Team
Lucas Toriello of ESIEA (C+V)° Laboratory
Mohamed A. Baset of SAS de C.V. Mexico
Simon Maddox
July 2016
Adrián Condes
Ahmed Elsobky (@0xSobky)
Dharamvir Bisht
Hasan Emre Özer
Micheal Cottingham
Orange Tsai of DEVCORE
Richard Shupak
Satyam Rastogi
Ye Yint Min Thu Htut of YGN Ethical Hacker group
June 2016
Aaditya Purani of IET-SEAS (@aaditya_purani)
Abhishek Shroti (@Fake_Politics)
Cameron Dawe of Spam404 (@Spam404Online)
Shawar Khan
May 2016
Akshay Jain
Gary O'Leary-Steele and Graham Bacon
Richard Shupak
Sébastien Kaul
Ye Yint Min Thu Htut (YGN Ethical Hacker group)
April 2016
Cosmin Maier
Edwin Foudil
Ing. Darnhofer Armin of Optix-IO AG
Latish Danawale
SaifAllah benMassaoud of Evolution Security GmbH - Government Laboratory
Suraj Mulik
March 2016
Micheal Cottingham
Mustafa Hasan (@strukt93)
Sandeep Singh Rehal of NTT Europe
February 2016
Charfeddine Hamdi (@tws_charfeddine) of Tunisian WhiteHat Security
Guilherme Scombatti
Harry M. Gertos
Harsh Jaiswal (@rootxflood)
Kapil Soni (Haxinos) of Xowia Technologies, India
Kieran Claessens (@KieranClaessens)
Micheal Cottingham
Richard Shupak
Rudra
January 2016
Geoffrey Van Den Berge (@geoffreyvdberge)
Jaanus Kääp of Clarified Security
Micheal Cottingham
Mousab Elhag Hassan
Rameen Mashhoon
U.Kiranvas Reddy