Apple quietly introduced a new batch of high-confidence "Apple Threat Notification" alerts to select iPhone users across 110 countries. According to Apple's own guidelines and recent reports, these alerts are reserved for cases where the company believes a well-funded surveillance operation is focusing on specific individuals due to who they are or what they do. When Apple flags suspected mercenary spyware attacks, a bright red notification appears on the iPhone lock screen, inside Settings under "Apple Threat Notification," and at the top of the user's account page after signing in.
Take immediate action now to safeguard your data and device." For recipients, this implies that the attack is likely using similar tools as well-known espionage platforms like Pegasus.
In reality, these messages often reach journalists, human rights activists, lawyers, political figures, and civil society organizers—people whose work makes them valuable intelligence targets. In addition to its own recommendations, Apple now directs affected users towards Access Now's 24/7 Digital Security Helpline, offering free expert support for at-risk members of civil society, including journalists and activists. Even those who never see an Apple Threat Notification can benefit from basic hygiene: keep iOS fully updated, use strong and unique passcodes, reduce the number of installed configuration profiles, and be cautious about unexpected links or attachments.
