Apple said it sent new spyware alerts to users in 110 countries and now delivers those notices directly to the iPhone lock screen, alongside email and account-login alerts. The company says the updated guidance makes it easier for recipients to see what happened and what to do next.
The change matters because a back-end warning can now appear before the user opens mail or account settings, so a suspected target is more likely to notice it quickly. Apple’s notices are aimed at government and mercenary spyware campaigns, not routine malware, and the company says it has never seen a device compromised while Lockdown Mode was enabled.
For teams supporting journalists, diplomats, activists, or other high-risk users, the alert itself is part of the incident surface: one notification can trigger help requests and wider investigations into abuse, not just a single-device cleanup.