CYBERSECURITYTRACKER
Permanent story citation

Apple notifications alert victims in 99 countries about mercenary spyware infections

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11938

As cited

Copy frozen at (site build).

threat intel

Apple notifications alert victims in 99 countries about mercenary spyware infections

Apple sent spyware infection notifications to users in 99 countries on October 30, 2026, marking its latest alert campaign targeting victims of mercenary spyware. The notifications reached journalists, documentary filmmakers, and other high-risk individuals, with researchers noting the batch represents a significant set of cases. Apple recommended recipients enable Lockdown Mode and contact digital rights organizations like Access Now for assistance.

Why it matters: Journalists, activists, and civil society actors in targeted countries face ongoing mercenary spyware attacks and should immediately enable Lockdown Mode, review their device security, and contact Access Now if notified; organizations supporting at-risk populations should prepare to assist victims with investigation and remediation.

VendorsApple
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Apple notifications alert victims in 99 countries about mercenary spyware infections

Apple sent spyware infection notifications to users in 99 countries on October 30, 2026, marking its latest alert campaign targeting victims of mercenary spyware. The notifications reached journalists, documentary filmmakers, and other high-risk individuals, with researchers noting the batch represents a significant set of cases. Apple recommended recipients enable Lockdown Mode and contact digital rights organizations like Access Now for assistance.

Why it matters: Journalists, activists, and civil society actors in targeted countries face ongoing mercenary spyware attacks and should immediately enable Lockdown Mode, review their device security, and contact Access Now if notified; organizations supporting at-risk populations should prepare to assist victims with investigation and remediation.

VendorsApple
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary