Apple sends new ‘Threat Notification’ alerts over mercenary spyware attacks

Sophisticated mercenary spyware like Pegasus exploits zero-day vulnerabilities in mobile operating systems, often requiring no user interaction (zero-click attacks), making traditional awareness training insufficient on its own. These attacks disproportionately target high-value individuals — journalists, activists, and politicians — whose devices hold sensitive communications and contacts. Apple's proactive Threat Notification system highlights the importance of platform-level detection mechanisms, but many victims may not know they are at risk until after compromise. The existence of a commercial spyware-for-hire industry means nation-state-level capabilities are accessible to a wider range of threat actors, raising the stakes for civil society and enterprise security alike.