Apple Issues Mercenary Spyware Alerts in 110 Countries
Apple upgrades security by pushing lock screen alerts to iPhone users in 110 countries, targeting over 150 nations globally since 2021.
Stock photo for illustration only, not from the actual event
- Apple sends new threat notifications to iPhone users across 110 countries
- Introduces direct lock screen push notifications for immediate visibility
- Advises enabling Lockdown Mode and preserving device data for forensics
- Citizen Lab notes alerts have previously helped expose major global scandals
On Thursday, August 13, 2026, a select group of iPhone users encountered unexpected alerts directly on their lock screens. Rather than standard software updates, these warnings from Apple explicitly stated that their devices were being targeted by state-sponsored spyware, detailing immediate actions required to secure their personal data.
Apple confirmed that the latest wave of threat notifications reached users across 110 countries. Combined with previous efforts since the program's inception in 2021, the company has now issued warnings in over 150 countries worldwide, highlighting how pervasive government-grade surveillance technology has become.
A major shift in this deployment is the delivery method. Previously reliant on emails and iMessages which risked being ignored, Apple now utilizes direct push notifications on the iPhone lock screen alongside account settings banners to ensure recipients immediately recognize the threat and access guidance.
Stock photo for illustration only, not from the actual event
Mercenary spyware refers to commercial surveillance software developed by private firms and sold to government entities. These multimillion-dollar targeted attacks, such as NSO Group's Pegasus or Paragon Solutions' Graphite, bypass standard security to access messages, photos, locations, and device sensors with minimal trace.
Apple's transition to lock screen push notifications represents a proactive approach to combat user oversight of email warnings. Because these sophisticated state-sponsored attacks require immense resources, they target specific high-risk individuals like journalists and diplomats, meaning the vast majority of everyday users remain unaffected.
"The notification creates a critical signal that a community is being targeted. People get notified, some reach out for help, and very frequently that sparks investigations that reveal a whole bunch of other cases."
John Scott-Railton, Senior Researcher at Citizen Lab
Apple's primary recommendation is to enable Lockdown Mode to block attack vectors, while strongly advising users not to factory reset their devices so that crucial digital forensics evidence remains intact. Victims can also access round-the-clock free assistance via the Access Now Digital Security Helpline.
Source: Techsauce
Found something wrong in this article? Report an issue with this article
Comments
Leave a Comment