Observed Signal · Mar 27, 2026 · Policy Update · Source: techcrunch · Impact: 4/5 · Sentiment: Neutral
Apple: No Known Spyware Hacks with Lockdown Mode
Apple says it has not observed any successful mercenary spyware compromises of Apple devices while Lockdown Mode was enabled. The company reiterated the claim to TechCrunch nearly four years after introducing the opt-in security feature in 2022, which disables features commonly exploited by spyware makers. Independent researchers and digital-rights groups — including Amnesty International and the University of Toronto’s Citizen Lab — say they have not seen evidence of successful attacks that bypassed Lockdown Mode, and some researchers reported Lockdown Mode actively blocked specific spyware attempts. Apple has also sent notifications to users in over 150 countries about potential spyware targeting. Security experts note Lockdown Mode reduces the remotely reachable attack surface, particularly versus zero-click exploit chains, though undetected bypasses remain possible.
Apple (a major platform vendor) publicly affirms the effectiveness of a built-in security feature against state/mercenary spyware; this affects user risk models, incident response, and broader privacy/security expectations that can influence data access and trust across digital ecosystems.
Track Apple Signals & Market Shifts in Real-Time
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- Apple says it is not aware of any successful mercenary spyware attacks against devices with Lockdown Mode enabled.
- Lockdown Mode is an opt-in security feature Apple introduced in 2022 to disable features commonly exploited by spyware.
- Apple has sent multiple notification batches to users in over 150 countries alerting them they may have been targeted by spyware.
- Amnesty International and the University of Toronto’s Citizen Lab report no evidence of successful compromises where Lockdown Mode was enabled; researchers have observed Lockdown Mode blocking some spyware attempts.
- Google security researchers reported spyware can abort infection attempts if it detects Lockdown Mode, indicating attackers may try to evade detection.
Connected Companies & Entities
2 Entities mappedOntology Mapping & Concepts
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
Apple issues push warnings about mercenary spyware
Apple is sending push notifications and emails to a small number of users worldwide to warn they were targeted by mercenary (soldier‑style) spyware intended to spy on Apple devices. The company updated a support document saying such attacks are rare and typically target journalists, activists, politicians and diplomats. Apple recommends contacting the nonprofit Access Now's Digital Security Helpline and enabling Lockdown Mode on iPhone, iPad and Mac. TechCrunch reports Apple issued warnings in 110 countries; Apple did not disclose the exact number of affected individuals.
Phone and App Features to Defend Against Spyware
Targeted spyware attacks — including zero-click exploits used against journalists and civil‑society members — have become common. Major platform owners now offer opt‑in defenses to reduce the risk of these stealthy hacks: Apple’s Lockdown Mode, Google’s Advanced Protection Program (and Android’s Advanced Protection Mode), and WhatsApp’s Strict Account Settings. These features trade some convenience for stronger protections (blocking certain message attachments, restricting links, tightening app install policies, blocking legacy networks, requiring security keys, enabling intrusion logging, etc.). Security researchers and publishers recommend enabling these controls if you are at risk from government‑grade surveillance. While not foolproof, evidence and forensic analyses indicate these measures have helped stop or limit successful spyware compromises in real cases.
Spike in Apple Spyware Alert Notifications
Apple sent a new wave of spyware threat notifications to customers, and investigators report an unprecedented uptick in people receiving and reporting those alerts. Access Now’s helpline saw about 30–40% more contacts than usual after Apple’s notifications; cybersecurity firm iVerify also confirmed an influx. Experts including The Citizen Lab say the scale and geographic spread of public reports is unusually large and could reflect either greater prevalence of mercenary spyware or Apple’s expanded notification methods, which now surface alerts on lock screens, in Settings, by email and on the web. Apple did not respond to requests for comment.
Track Real-Time Market Signals & Shifts
Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.