Apple issues spyware warnings as CERT-FR confirms attacks

Apple warned customers about a spyware campaign, with France’s cyber agency CERT-FR confirming that iCloud-linked devices may be compromised in targeted attacks. According to CERT-FR, Apple sent spyware alerts on March 5, April 29, June 25, and September 3, delivered via email, phone, and the account portal, where warnings also appear after login.

The notifications indicate that at least one device linked to an iCloud account has been targeted, often with the attacker using zero-day vulnerabilities or requiring no user interaction. The agency notes that the time between the compromise attempt and the notification can span several months.

Since 2021, Apple has notified people targeted by spyware such as Pegasus, Predator, Graphite, or Triangulation, with alerts typically reaching high-risk groups including journalists, lawyers, activists, politicians and executives. CERT-FR did not share technical details about the specific campaigns, and Apple advises users to keep devices updated, enable automatic updates, and practice good IT hygiene to reduce spyware risks.