In late October, reported in early November 2026, Apple sent high-confidence threat notifications to selected iPhone users in 99 countries that they may have been targeted by sophisticated “mercenary” spyware. Recipients included journalists and, in Germany, lawmakers and foreign-policy staff. Apple did not name the attacker or confirm compromise; it advises Lockdown Mode and specialist help.

What it means: Apple’s targeted alerts show government-grade spyware remains active against journalists and officials in Europe. Greek public bodies, media and NGOs need a playbook when a threat notification arrives: isolate the device, forensic review and prompt Lockdown Mode. Firms managing iOS fleets need MDM policies and a CSIRT escalation path. This does not disclose exploit methods; it focuses on response and protection of high-risk users. For Greek businesses and public bodies this means a practical review of contracts, timelines and compliance duties, and it is not investment or legal advice. IT, finance and compliance teams should document owners, review cycles and fallback processes before wider adoption or a vendor change. For Greek businesses and public bodies this means a practical review of contracts, timelines and compliance duties, and it is not investment or legal advice. IT, finance and compliance teams should document owners, review cycles and fallback processes before wider adoption or a vendor change.

Read the original on CyberScoop / Apple threat notifications reporting

Related service: Custom software

Related stories