Apple sent a new batch of push notifications on August 13, 2026, alerting users in 110 countries of suspected mercenary spyware attacks on their iPhones [1, 2]. The notifications appear on the users’ lock screens and are also sent via email. They warn: "Apple detected a mercenary spyware attack targeted at your iPhone. There are actions you can take now to protect your data and device." Apple has updated the notification experience to help recipients more easily access information on next steps and how to protect their devices [1, 3, 2].
The tech company has issued spyware alerts to users in over 150 countries since 2021, sending notifications multiple times per year to those potentially targeted [1, 3]. Apple recommends enabling its Lockdown Mode security feature, which it says has prevented any successful spyware breaches so far on devices where it is enabled [1, 2].
Mercenary spyware like Pegasus is sold to governments and used to spy on high-risk individuals including journalists, activists, politicians, and diplomats [1, 3, 2]. John Scott-Railton explained the significance of Apple’s alerts, saying, "Notifications create a critical signal that a community is being targeted. People get an alert, and then some of them reach" [1]. He added, "That means tech like Pegasus used by governments to spy on you" [2].
Apple stresses that receiving a notification does not necessarily mean a device was successfully hacked, but that spyware-like activity was detected on it [1, 2]. The company also warns users that legitimate Apple notifications never ask recipients to click links, download files, install apps, or provide credentials by email or phone [3].
The latest round of notifications highlights Apple's ongoing efforts to warn and protect users worldwide from sophisticated mercenary spyware. Users who receive alerts are encouraged to review Apple's recommended security measures, including activating Lockdown Mode, to secure their devices [1, 2].
