Mobile device security and spyware threats

Security researchers identified vulnerabilities in budget Android devices using Unisoc modems, which could allow attackers to access the Android kernel via video calls.

Concurrently, Apple has issued unprecedented threat notifications to iPhone users across approximately 110 countries, warning of potential targeted attacks by mercenary spyware. These alerts, which appear on lock screens, in settings, and via email, notify users that Apple’s threat intelligence has identified activity consistent with highly sophisticated spyware attacks. While the notifications do not necessarily confirm a successful compromise, they indicate that specific users are being targeted by tools often sold by private firms to government clients to intercept messages, photos, and location data.

In response to these threats, Apple released an emergency security update to address critical vulnerabilities, including CVE-2026-20700, a memory corruption flaw that could allow attackers to execute arbitrary commands. Apple has declined to disclose the specific triggers for these notifications to prevent attackers from bypassing monitoring systems. The company continues to advise at-risk users to immediately activate ‘Lockdown Mode’ and consult security experts.