If Apple sends you a push notification alerting you to a spyware attack, take it seriously
Apple has issued a new round of warnings to customers it believes may have been targeted by mercenary spyware, urging them to act quickly to protect their devices and data. The alerts matter because such spyware is often used by governments against critics and civil-society figures, and notifications can prompt wider investigations into abuse.
The company said Thursday’s alerts reached users in 110 countries, while customers in more than 150 countries have received such warnings to date. Apple now displays a lock-screen push notification alongside email and account-login alerts, and advises recipients to seek support and enable Lockdown Mode; it says it has not seen a device compromised while that feature was active. Researchers welcomed the clearer alerts, noting that previous Apple notifications helped expose alleged spyware misuse in Poland.
- Apple warned suspected spyware targets in 110 countries.
- Recipients should act quickly and enable Lockdown Mode.
- Alerts can expose broader government spyware abuse.
New here? Start with this
Spyware is software that can secretly monitor a person’s phone and collect information such as messages, location or calls. “Mercenary” spyware is made or sold by private companies, and can be used by governments to target particular people, including journalists, activists and other civil-society figures.
Apple makes iPhones and other devices, and says it sends warnings when it believes a customer may have been targeted by this kind of spyware. The alerts can lead people to seek expert help and check whether their devices or accounts have been affected.
The warnings also matter beyond individual customers: security researchers and authorities may investigate suspected attacks, and earlier Apple alerts have helped draw attention to alleged spyware misuse. Lockdown Mode is an optional iPhone setting that limits some functions to reduce exposure to sophisticated digital attacks.
Both sides, in good faith
The strongest fair case each way — we don't pick a winner.
The case for
These warnings protect vulnerable populations including journalists and activists from genuine state-sponsored spyware threats that pose serious risks to civil society. Apple's alerts have demonstrated real-world success in exposing surveillance campaigns, and security researchers affirm that the notifications provide appropriate and helpful defences for at-risk individuals. Taking these warnings seriously involves concrete protective measures with minimal downside risk.
The case against
Apple's threat detection lacks transparency and independent verification, making it impossible to assess whether warnings reflect genuine attacks or serve Apple's commercial interests. The protective measures recommended, particularly Lockdown Mode, impose significant usability costs that may outweigh actual threat levels for ordinary users. Without clearer methodology, users cannot make fully informed decisions about whether these security trade-offs match their individual risk profile.