Apple Warns French Users of Fourth Spyware Campaign in 2025, CERT-FR Confirms

According to CERT-FR, Apple has notified users in France of a spyware campaign targeting their devices, marking the fourth time this year that Apple has alerted citizens that an iCloud-linked device may have been compromised in highly-targeted attacks. The alerts were sent out on 3 September 2025. CERT-FR said these attacks are directed at individuals for their status or function, including journalists, lawyers, activists, and politicians.

The report notes that previous threat notifications were issued on 5 March, 29 April, and 25 June 2025, and that Apple has been issuing notices since November 2021. The development comes after a linked WhatsApp security flaw (CVE-2025-55177) and an iOS bug (CVE-2025-43300) were described as part of zero-click attacks, with WhatsApp later stating it had sent in‑app threat notifications to fewer than 200 users.

Apple has also introduced Memory Integrity Enforcement (MIE) in the latest iPhone models to combat memory corruption vulnerabilities and hinder surveillance vendors.