Apple Issues Threat Notifications for Spyware Attacks

On September 2, 2026, Apple began alerting users directly on their device Lock Screen and Settings about potential spyware threats. These notifications indicate that users may have been targeted by mercenary spyware from companies like NSO Group, Cytrox, and Paragon. The alerts do not confirm whether the attack was successful or identify the attackers. Users are advised to seek expert support for digital forensic investigations if they receive these notifications. Access Now emphasizes the importance of preserving evidence immediately, as data can be overwritten quickly. The Digital Security Helpline is available for tailored advice, especially for activists and journalists. Apple has been issuing these warnings since 2001 but has now made them more prominent. The notifications serve as a critical reminder for users to enhance their device security and remain vigilant against spyware.

Key Points: • Apple has enhanced spyware threat notifications to Lock Screen and Settings. • Users are advised to seek expert help if they receive a notification. • The notifications indicate potential targeting by mercenary spyware but do not confirm successful attacks.