Apple creates Private Cloud Compute VM to let researchers find bugs

Apple announced public access to a Virtual Research Environment (VRE) for its Private Cloud Compute (PCC), enabling researchers to inspect, test, and debug PCC’s privacy and security architecture locally. Alongside a detailed Security Guide, Apple released source code for components including CloudAttestation, Thimble, splunkloggingd, and srd_tools, and expanded its bug bounty program with rewards up to $1,000,000 for high-impact PCC vulnerabilities. The VRE, available on macOS Sequoia 15.1 Developer Preview for Apple silicon devices with 16GB+ memory, supports isolated PCC releases, deeper instrumentation, and inference against demo models to validate Apple’s security and privacy guarantees.