[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fv_evYAazPxAx1E3M4chdQrdExlYnL7PGrwVTCTfM0Qg":3},{"article":4,"iocs":49,"watch_terms":54,"solutions":55,"lesson":120},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"deb3983d-02af-49bb-96c6-1046eea095fd","Apple sends new ‘Threat Notification’ alerts over mercenary spyware attacks","apple-sends-new-threat-notification-alerts-over-mercenary-spyware-attacks-df1d90","You're not alone if you just received an \"Apple Threat Notification\" saying it detected a \"mercenary spyware attack targeted at your iPhone.\" [...]","Apple has issued a new wave of 'Threat Notifications' to users whose iPhones may have been targeted by mercenary spyware. These alerts, sent since 2021, indicate a high-confidence detection of sophisticated, expensive attacks aimed at a small number of individuals, often journalists, activists, or politicians. While Apple doesn't name the specific spyware, NSO Group's Pegasus is cited as a historical example.","Apple alerts users to targeted mercenary spyware attacks on iPhones.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fapple\u002Fapple-sends-new-threat-notification-alerts-over-mercenary-spyware-attacks\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2025\u002F05\u002F29\u002Fapple.jpg","2026-08-14T01:19:12+00:00","2026-08-14T02:00:04.041346+00:00",8,[17,20,23],{"name":18,"type":19},"iPhone","product",{"name":21,"type":22},"Apple","vendor",{"name":24,"type":25},"NSO Group","threat_actor","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":26,"icon":28,"name":29,"slug":30},null,"Threat Intelligence","threat-intelligence",[32,37,42,47],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":38},{"id":39,"icon":28,"name":40,"slug":41},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":43},{"id":44,"icon":28,"name":45,"slug":46},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":48},{"id":26,"icon":28,"name":29,"slug":30},[50],{"type":51,"value":52,"context":53},"email","threat-notifications@email.apple.com","Official email address for Apple's threat notifications.",[21,18],{"controls":56,"vendors":114},[57,86],{"slug":58,"name":59,"problem":60,"products":61},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[62,70,78],{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-edr","Huntress Managed EDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-edr","Endpoint detection and response monitored around the clock by Huntress analysts.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-endpoint","Microsoft Defender for Endpoint","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fendpoint-security\u002Fmicrosoft-defender-endpoint","Endpoint detection and response for Windows, macOS, Linux and mobile devices.",{"vendor_slug":79,"vendor_name":80,"vendor_logo":81,"product_slug":82,"product_name":83,"url":84,"description":85},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-xdr","Cortex XDR","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xdr","Endpoint detection and response with extended detection across network, cloud and identity.",{"slug":30,"name":87,"problem":88,"products":89},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[90,98,106],{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-adversary-intelligence","Falcon Adversary Intelligence","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fthreat-intelligence\u002F","Threat intelligence on the adversaries CrowdStrike tracks, built into the Falcon platform to detect, disrupt and defend against them.",{"vendor_slug":99,"vendor_name":100,"vendor_logo":101,"product_slug":102,"product_name":103,"url":104,"description":105},"recorded-future","Recorded Future","\u002Fvendor-logos\u002Frecorded-future.png","recorded-future-cyber-operations","Recorded Future Cyber Operations","https:\u002F\u002Fwww.recordedfuture.com\u002Fproducts\u002Fcyber-operations","Threat intelligence built into security operations workflows, to prioritise alerts and act on threats before they arrive.",{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":111,"url":112,"description":113},"dataminr","Dataminr","\u002Fvendor-logos\u002Fdataminr.png","dataminr-threat-intelligence","Dataminr Threat Intelligence","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fthreat-intelligence\u002F","Real-time alerts on emerging cyber threats, exploited vulnerabilities and attacks relevant to your organisation, detected with AI across a large set of public data sources.",[115],{"slug":116,"name":21,"logo_path":117,"roles":118},"apple","\u002Fvendor-logos\u002Fapple.png",[119],"reported_by",{"slug":121,"title":122,"body":123,"framework_refs":124,"framework_notes":135},"mercenary-spyware-attacks-target-high-risk-individuals-via-iphone-zero-days","Mercenary Spyware Attacks Target High-Risk Individuals via iPhone Zero-Days","Sophisticated mercenary spyware like Pegasus exploits zero-day vulnerabilities in mobile operating systems, often requiring no user interaction (zero-click attacks), making traditional awareness training insufficient on its own. These attacks disproportionately target high-value individuals — journalists, activists, and politicians — whose devices hold sensitive communications and contacts. Apple's proactive Threat Notification system highlights the importance of platform-level detection mechanisms, but many victims may not know they are at risk until after compromise. The existence of a commercial spyware-for-hire industry means nation-state-level capabilities are accessible to a wider range of threat actors, raising the stakes for civil society and enterprise security alike.",[125,126,127,128,129,130,131,132,133,134],"CIS Control 4 – Secure Configuration of Enterprise Assets","CIS Control 7 – Continuous Vulnerability Management","CIS Control 17 – Incident Response Management","NIST SP 800-124 – Guidelines for Managing Mobile Device Security","NIST IR (Incident Response) – SP 800-61 Rev. 2","NIST AC-2 – Account Management","NIST SI-3 – Malicious Code Protection","GDPR Article 32 – Security of Processing (for organizations handling personal data on affected devices)","ITIL – Major Incident Management Process","Apple Platform Security Guide – Lockdown Mode",{}]