Security News

Apple Warns Users in 99 Countries That They May Be Targets of Mercenary Spyware

CyberScoop · 31 Oct 2026
Key Takeaway If anyone in your business receives an Apple threat notification, treat it as serious, turn on Lockdown Mode, seek help from a trusted group such as Access Now, and avoid paying companies that promise quick spyware fixes.

Apple has sent fresh threat notifications to targeted users in 99 countries, including journalists and documentary filmmakers. The company says it has now notified users in more than 150 countries in total. Apple describes mercenary spyware as one of the most advanced digital threats in existence, citing its extreme cost, sophistication and worldwide reach. It does not attribute the attacks, or the notifications, to any specific attackers or regions. Apple did not immediately respond to a request for comment about which countries were involved.

Researchers and groups working on spyware say the alerts are significant. John Scott-Railton of The Citizen Lab said that, based on what is visible publicly, this looks like an important set of cases. He warned that not receiving a notification does not rule out an infection, and he urged people to be cautious about companies selling paid fixes for spyware. Natalia Krapiva of Access Now said the volume of alerts shows the fight against spyware abuse is far from over, and that repressive states continue to use these tools against civil society and opposition figures.

For anyone who receives a notification, Apple recommends turning on Lockdown Mode and contacting Access Now, a step Scott-Railton also supports. Apple's last major batch of notifications was sent in August. Such alerts often lead recipients to seek help from Access Now, The Citizen Lab and other groups, which can prompt deeper investigations.

Apple spyware threat notifications Lockdown Mode mobile security

Summarised by CISO AI from CyberScoop, written with Claude Sonnet 5.5. We link back to every original so you can read it yourself.