Apple Sends New Spyware Warnings to Users

Apple has told customers their devices may have been targeted in a fresh wave of spyware attacks. The alerts, confirmed by France’s cybersecurity response team CERT-FR^[1], went out on September 3.

Multiple Notifications This Year

The French agency said Apple had already issued three earlier warnings this year, in March, April, and June. Each message was sent to the phone number or email tied to the user’s Apple ID and also showed up when logging into Apple’s account site.

The notices mean at least one device linked to the account may have been compromised. CERT-FR described the attacks as highly sophisticated, often using unknown flaws or zero-click methods. Targets usually include people in sensitive roles such as journalists, politicians, lawyers, activists, and senior officials.

No Details on Victims

It’s not clear how many people received the September warnings or what spyware was involved. Apple hasn’t named the group behind the activity and didn’t respond to questions.

Last month, the company released fixes for a zero-day flaw tracked as CVE-2025-43300. That issue had been paired with a WhatsApp exploit that required no action from the victim, an attack described as very advanced. WhatsApp at the time urged users to reset phones and update software.

Guidance for Affected Users

Apple recommends that anyone notified should enable Lockdown Mode and seek emergency help from Access Now’s Digital Security Helpline.

Since 2021, the company has issued similar threat alerts several times a year, covering users in more than 150 countries. Victims have recently been identified in Europe, India, Iran, and other regions.

France remains especially alert to spyware after reports in 2021 that President Emmanuel Macron changed phones following suspected targeting with Pegasus, made by NSO Group.

Notes: This post was edited/created using GenAI tools. Image: DIW-Aigen.

Read next: FTC Probes AI Chatbot Safety for Children and Teens^[2]