Apple will notify users about state-sponsored cybersecurity threats (support.apple.com)

Article summary

Apple will notify users if their accounts or devices have been targeted by state-sponsored cybersecurity threats, specifically mercenary spyware attacks. These notifications will be delivered via iPhone alerts, email, and Apple Account page banners. The company relies on internal threat intelligence to detect such attacks and will provide guidance on protecting against them. Apple has been sending these notifications since 2021 to users in over 150 countries.

Main themes

• state-sponsored cybersecurity threats
• mercenary spyware attacks
• Apple's threat notification system
• government surveillance and censorship
• tech company responsibility and transparency
• user security and privacy

What commenters say

• Some commenters question whether Apple would report state-sponsored attacks from certain countries, such as China or the US, due to potential political or economic pressures.
• Others note that Apple's ability to detect and report state-sponsored attacks may be limited by the sophistication of the attacks and the involvement of governments.
• A few commenters argue that the lack of context and information provided by Apple's notifications may not be helpful for users in responding to the threats.
• There is also a discussion about the effectiveness of similar features offered by other tech companies, such as Google and Facebook, in detecting and warning users about state-sponsored attacks.
• Some commenters express skepticism about the ability of any company, especially smaller ones, to stand up against state-sponsored attacks and surveillance.
• Others point out that Apple's notifications may not be triggered by certain types of government requests, such as subpoenas, which may not be considered cyberattacks.
• A few commenters argue that the notifications may be more useful for future users who may be targeted by the same attackers, as it may help to prevent further attacks.
• There is also a discussion about the potential trade-offs between security and privacy, and the need for more transparency and context in reporting state-sponsored attacks.