{"id":"apple-spyware-threat-notifications-aug-2026","category":"breach","status":"live","title":"Apple warns targeted users in 110 countries about mercenary spyware","tldr":"Apple sent spyware warnings to targeted users in 110 countries on 13 August. A warning establishes targeting, not successful infection. Verify it at account.apple.com, update your devices, enable Lockdown Mode and seek specialist help.","summary":"Apple confirmed that it sent a fresh batch of mercenary spyware warnings on 13 August 2026 to targeted users in 110 countries. It did not disclose the number of recipients, the spyware involved or the attackers. Apple describes these warnings as a strong indication of individual targeting; receiving one does not establish that a device was successfully infected. Such attacks focus on particular people, often because of their role or activities, rather than Apple users generally. As of 3 November, the sources reviewed identify no specific vulnerability, affected software versions or fixed release tied to the August warnings. Updates and Lockdown Mode are protective measures, not a verified fix for this unidentified activity. A further notification batch covering 99 countries was reported on 30 October, but it does not establish the outcome of August’s cases.","action":"If you received a warning, type account.apple.com into your browser and sign in to verify it. Update your Apple devices, then on iPhone or iPad open Settings → Privacy & Security → Lockdown Mode → Turn On Lockdown Mode and follow the restart prompts. Seek specialist security help; Apple recommends Access Now’s Digital Security Helpline.","product":"Apple iPhone users receiving mercenary spyware threat notifications","audience":"both","severity":"high","patch":"na","exploited":true,"cves":[],"tags":["apple","iphone","spyware","targeted-attacks","threat-notifications"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"advisory","title":"About Apple threat notifications and protecting against mercenary spyware","url":"https://support.apple.com/en-us/102174","by":"Apple","date":"2026-08-13"},{"kind":"advisory","title":"About Lockdown Mode","url":"https://support.apple.com/en-us/105120","by":"Apple","date":"2026-09-14"},{"kind":"news","title":"Apple sends new ‘Threat Notification’ alerts over mercenary spyware attacks","url":"https://www.bleepingcomputer.com/news/apple/apple-sends-new-threat-notification-alerts-over-mercenary-spyware-attacks/","by":"BleepingComputer","date":"2026-08-13"},{"kind":"news","title":"Apple spyware-alert follow-up","url":"https://techcrunch.com/2026/08/17/unprecedented-number-of-apple-users-received-recent-spyware-alert-say-investigators/","by":"TechCrunch","date":"2026-08-17"},{"kind":"news","title":"Apple notifications alert victims in 99 countries about mercenary spyware infections","url":"https://cyberscoop.com/apple-spyware-notifications-pall-mall-process/","by":"CyberScoop","date":"2026-10-30"}],"started":"2026-08-13","closed":null,"created":"2026-11-03T20:59:44.314Z","updated":"2026-11-03T20:59:44.314Z","cve_notes":[],"timeline":[{"at":"2026-10-30","added":"2026-11-03T20:51:54.186Z","kind":"other","text":"CyberScoop reported another notification batch covering 99 countries, following August’s warnings. This was a separate batch, not confirmation that the August targeting had ended.","url":"https://cyberscoop.com/apple-spyware-notifications-pall-mall-process/","by":"CyberScoop","patch":null},{"at":"2026-08-17","added":"2026-11-03T20:51:54.186Z","kind":"other","text":"Access Now told TechCrunch that requests for help were 30–40% above its usual post-notification level.","url":"https://techcrunch.com/2026/08/17/unprecedented-number-of-apple-users-received-recent-spyware-alert-say-investigators/","by":"TechCrunch","patch":null},{"at":"2026-08-13","added":"2026-11-03T20:51:54.186Z","kind":"vendor-revised","text":"Apple’s updated guidance describes warnings delivered directly on iPhone, by email and through the Apple Account website. It recommends Lockdown Mode and expert security assistance for recipients.","url":"https://support.apple.com/en-us/102174","by":"Apple","patch":null},{"at":"2026-08-13","added":"2026-11-03T20:51:54.186Z","kind":"disclosed","text":"Apple confirmed to BleepingComputer that it sent spyware threat notifications to targeted users in 110 countries. It did not identify the spyware or disclose how many people received warnings.","url":"https://www.bleepingcomputer.com/news/apple/apple-sends-new-threat-notification-alerts-over-mercenary-spyware-attacks/","by":"BleepingComputer","patch":"na"}],"url":"https://hard.fyi/live/apple-spyware-threat-notifications-aug-2026/","json":"https://hard.fyi/api/live?id=apple-spyware-threat-notifications-aug-2026"}