Apple warns users in 84 countries of possible state-backed cyber threats

Apple has issued fresh threat notifications to users in 84 countries, cautioning that their devices may be targeted by sophisticated, state-linked hackers. The company says the alerts aim to protect individuals vulnerable to high-risk, targeted cyber intrusion.

Apple has released a new round of cyber threat notifications to users across 84 countries, signalling a renewed wave of highly targeted, state-backed hacking attempts. Issued earlier this month, the warnings form part of Apple’s ongoing strategy to safeguard individuals at risk of advanced digital surveillance.

The company routinely sends these alerts when its internal security teams detect activity suggesting that a user may be specifically targeted by threat actors believed to be associated with government agencies. Such notifications are rare and usually directed at individuals whose work or public exposure makes them vulnerable to espionage.

High-risk individuals among those notified

While Apple did not disclose the number of affected users or details about the attackers, the company emphasised that revealing specifics could expose defensive methods and help adversaries modify their tactics. Historically, recipients of these warnings have included journalists, political figures, civil society leaders, human rights defenders and diplomats—groups often targeted due to their influence or access to sensitive information.

These attacks typically rely on sophisticated exploits such as zero-click vulnerabilities, which require no interaction from the victim and are costly to develop. Apple noted that, since launching its notification system, it has now alerted users in more than 150 countries, reflecting the expanding global footprint of state-sponsored cyber operations.

Tech industry response and user safety measures

Apple’s latest action aligns with broader moves within the tech industry to flag state-linked cyber threats. Google, among others, has recently issued similar warnings aimed at shielding users from targeted spyware campaigns. Digital rights groups say such notifications often spark deeper investigations into the misuse of surveillance tools and can lead to government inquiries.

Apple is urging notified users to immediately activate Lockdown Mode, a specialised security feature designed for individuals facing extreme cyber risks. The company also stressed that legitimate alerts will never ask users to click external links or download software; instead, recipients can verify warnings by signing into their Apple ID accounts directly.