Your iPhone could be hacked without you touching a single link
You might never know it happened. No suspicious message you opened, no strange link you tapped, no app you downloaded — just a silent notification from Apple saying that someone powerful tried to break into your phone. This week, the latest Apple spyware warning reached iPhone users in 99 countries, including sitting members of the German parliament, telling them they had been targeted by some of the most advanced hacking tools on the planet.
The alerts began landing on devices around 29 October 2026. They are part of a fresh wave of Apple threat notifications, and according to security researcher Costin Raiu — who first flagged the new round on 30 October — this wave is separate from the one Apple issued in August, which covered 110 countries. The new alerts are tied to new attack activity, he said, not leftovers from the earlier wave.
What makes this round remarkable is the scale and the target list. Apple itself confirmed that the latest notifications went to targeted users in 99 countries, bringing the total number of countries where it has warned people since it started the programme in 2021 to more than 150. Apple deliberately does not name the countries, the attackers, or the spyware used — but this time, governments had to respond in public.
Germany: lawmakers told to assume their devices are compromised
Germany became the most visible front of this attack wave. According to reports in the Financial Times and TechCrunch, Apple threat notifications started reaching iPhones belonging to members of the Bundestag — Germany’s federal parliament — and other public figures on 29 October. Germany’s federal cybersecurity office, the BSI, responded to the Apple spyware warning with a letter to lawmakers on 30 October and an urgent public advisory over the weekend.
The instruction was unusually blunt: anyone who received an Apple alert should treat their device as possibly compromised. Affected individuals were told to contact the BSI directly. Germany’s digital minister confirmed over the weekend that Bundestag members and federal government officials were among the recipients.
German government spokesman Stefan Kornelius said Berlin was “taking the incident and the warning very seriously” and working flat out to investigate the circumstances — though he declined to say which officials were affected, or whether Chancellor Friedrich Merz was among them. The Financial Times reported that the attacks exploited a “zero-click” vulnerability — the most dangerous kind — which allows spyware to compromise a device without the victim clicking a link, opening a file, or doing anything at all.
There is a certain irony here. Germany’s own federal criminal police office reportedly purchased access to the infamous Pegasus spyware back in 2019. Now the country’s lawmakers are the ones receiving the warnings.
What is mercenary spyware — and who buys it?
Apple uses the term “mercenary spyware” for surveillance tools built by private companies and sold, mostly, to government clients. Unlike ordinary cybercrime malware, these are costly, sophisticated products designed to turn a smartphone into a pocket spy: stealing messages, tracking location, switching on the microphone or camera, and copying files — sometimes without the owner ever noticing.
The best-known name in this shadowy market is Israel’s NSO Group, whose Pegasus tool has been used against journalists, politicians, and activists in many countries. Apple cites Pegasus as a historical example but has not attributed this latest wave to any company, government, or region. Nobody has publicly identified who is behind the attacks. Pakistan has featured in global spyware research before — a Citizen Lab report found Pakistan ranked second worldwide in spyware ad bids by an Israeli surveillance firm.
The latest alerts are also not confined to Germany. Two journalists have publicly confirmed receiving the new Apple warnings. Ragıp Soylu, the Turkey bureau chief for Middle East Eye, posted his alert and said it was his third such notification this year alone. Radwan Mortada, a Beirut-based filmmaker, said Apple had detected “another attack against your device” — he had previously been targeted by spyware in 2021.
Apple describes its threat notifications as high-confidence warnings that someone has been targeted. That is an important distinction: receiving one does not confirm your phone was actually breached. But the company advises recipients to take every warning seriously.
An industry the world is finally trying to regulate
The attack wave has landed at a sensitive moment. The Pall Mall Process — the international effort launched by the UK and France in 2024 to curb commercial spyware abuse — is moving toward an industry code expected in November 2026, extending voluntary standards from governments to the companies that build the tools. A companion code for states, backed by 27 countries, already took effect in 2025. Meanwhile, attackers keep finding new ways in.
What should you do if you ever get this alert?
First, the good news: almost no one will ever receive one of these warnings. Apple says mercenary spyware is far more advanced than common cybercrime tools, and ordinary users are not the target. If you have never received a threat notification, there is no action to take beyond the usual good habits — though Pakistan’s National CERT has separately warned about phones being hacked through malicious ads, a different but equally silent attack vector.
But if you ever receive an Apple spyware warning, the official guidance is clear. Verify the alert by signing in to your Apple Account manually — genuine notifications appear as a banner there, since fake alerts are a common phishing trick. Update your iPhone to the latest software immediately. Consider enabling Lockdown Mode, Apple’s extreme-protection setting designed for people facing targeted attacks. And seek specialist help: Apple points notified users to Access Now’s Digital Security Helpline, available around the clock.
Apple has not disclosed which of the 99 countries are home to the targeted users, and it never will — that secrecy is part of the programme’s design. But the lesson travels: the most expensive hacking tools in the world are aimed at real people, and even a parliament can find itself on the receiving end. The rest of us can at least make sure our software is up to date.
Related Posts
Technology“Even WhatsApp Calls Drop in Islamabad”: NA Committee Grills PTA Over Poor Telecom Services
TechnologyNCCIA Arrests Man in Rs2.39 Million Fake Bank Receipt Fraud in Rawalpindi
TechnologyPakistan Must Build, Not Just Consume, Fintech, Bilal Bin Saqib Tells Bankers
TechnologySalesforce to Acquire AI Startup Cresta for $2.7 Billion in Voice AI Push
TechnologyOpenAI to Buy Google TPU Chips: ChatGPT Maker’s First Big Step Away from Nvidia
TechnologyBinance Customers Withdraw $4.7 Billion After $6.3 Billion HackMost Popular
How-ToPTA Tax Calculator 2026: Check Mobile Tax on Any Phone394 views
Pakistan NewsPIA Boeing 787 Lease Deal: What It Means for the Airline379 views
SportsUEFA Champions League 2026-27: Format, Teams and Schedule372 views
Canada JobsTech Jobs in Canada: Roles, Salaries, and Skills Needed352 views
SportsBallon d’Or 2026: London Ceremony, Nominees and All-Time Records Ahead of 70th Anniversary334 views
ShowbizWomen’s Fashion in Pakistan 2026: Trends, Brands and Style Guide331 views
