Apple and Google sound global alarm as state-linked cyber attacks target users in 150 countries

Cyberattack

Apple and Google have issued fresh threat alerts to users around the world, warning that state-backed hacking groups may be attempting to infiltrate personal devices. The notifications highlight the escalating scale of sophisticated cyber operations and the continued spread of commercial spyware used by governments and contractors.

Apple confirmed it sent its latest round of alerts on 2 December, without revealing how many people were affected or which groups were suspected to be involved. The company has now issued warnings to users in more than 150 countries since launching its threat-notification programme. Apple typically sends these messages only when it detects signs that an individual has been deliberately targeted in an advanced attack linked to state entities or surveillance operators.

Google followed with its own update on 3 December, announcing that it had reached out to all users identified as targets of the Intellexa spyware platform. Several hundred accounts across regions including Pakistan, Kazakhstan, Angola, Egypt, Uzbekistan, Saudi Arabia, and Tajikistan were notified. Intellexa, a surveillance vendor sanctioned by the United States, has continued to evolve its tools despite international pressure. The organisation has not commented on Google’s findings.

Alerts from the two companies regularly trigger political investigations, especially in cases involving public officials or journalists. Previous disclosures have prompted the European Union to open inquiries into the misuse of commercial spyware. Researchers say these notifications disrupt active surveillance efforts by alerting intended victims before attackers can fully exploit their access. According to John Scott-Railton of Citizen Lab, such warnings often spark deeper probes that uncover patterns of abuse and help build accountability.

The latest wave of alerts reflects the growing difficulty of containing the spyware industry, which continues to supply increasingly advanced tools to state agencies worldwide. As digital espionage capabilities expand, tech platforms remain reliant on early-warning systems to provide at least some protection for those being targeted. The continued stream of notifications from Apple and Google suggests that the threat landscape is not easing and that commercial spyware networks remain active across multiple continents.