EXPLORINEER
en

DE — heise online

Apple Reports Devices Compromised by Spyware

Security1 min read

Germany's federal IT security office (BSI) warned lawmakers and government members about a possible spyware attack on iPhones. Apple had sent threat alerts saying a 'Mercenary' spyware attack may have been detected.

What happened

According to the ARD news studio in Berlin, the BSI warned members of the German parliament and government about a possible attack with spy software on phones. The warning concerns a threat notice from Apple for iPhones. Since October 29, the devices received a warning that Apple had detected an attack with so-called Mercenary spyware. Digital minister Karsten Wildberger said Apple reported that certain devices may have been compromised. He said the BSI reacted very fast and wrote to everyone affected about what to do. He did not give more details.

Key facts

  • The warning was sent to iPhones on October 29.
  • The spyware is called Mercenary spyware.
  • Apple says it sends these alerts when users are likely to have been targeted on purpose.
  • An alert does not prove that a phone is infected.

What is spyware?

Spyware is harmful software. It is installed on a computer or phone without the user knowing or agreeing. It secretly collects data, such as typed keys, messages, photos, location, calls and microphone recordings, and sends it to others. Such programs often arrive through fake email attachments, fake links or apps from unsafe sources. Some use security holes in old software. Criminals, stalkers and governments all use spyware.

Why it matters

The warning reached people who work in politics and government, so the risk may be serious. The minister said it is not yet clear what kind of attack this is. He also said he would not link it to AI attacks, because phone spyware has existed for a long time. Still, he said the case worries the government a lot.

What to watch

  • Whether the BSI or Apple gives more details about the attack.
  • Whether more people, beyond lawmakers and ministers, receive similar alerts.
  • What steps affected users are asked to take.

Glossary

BSI
Germany's Federal Office for Information Security, which protects government and public IT systems.
Spyware
Harmful software that secretly collects a person's data and sends it to others.

Same story, different eyes

Ad

Add 150 words. Learn 10 a day.

Dicter word books send only the words you learn to your review notes.

SecurityThe Verge

Flock keeps ignoring requests to cancel its contracts

As more cities cancel contracts with Flock Safety, some are finding it difficult to end them. Plymouth, Minnesota, got no response from the company after its council voted to terminate, so the police chief had staff disconnect the cameras' power. In Dayton, Minnesota, Flock said removal would take up to 60 days, but it reconnected two cameras without authorization despite a police request not to proceed.

Securityheise online

FBI: North Korea behind multibillion-dollar crypto theft from Binance

According to the FBI, North Korean hackers from the group TraderTraitor carried out the multibillion-dollar attack on the cryptocurrency exchange Binance, which the FBI put at more than $6 billion. The FBI asked companies to block deposits and withdrawals from certain addresses to hinder laundering of the stolen assets. Binance says it has covered 90 percent of the stolen sum and that first withdrawals resumed on Sunday morning.

SecurityZDNet Korea

AI Era Privacy Future: Calls to Unify "Collection and Provision" Under "Processing"

Panelists at the third "Everyone's Debate" forum, held by the Ministry of the Interior and Safety and the Personal Information Protection Commission, argued that Korea's consent-centered privacy system needs legal and safeguard reforms for the AI era. Proposals included merging the separate rules for collection and provision into a single "processing" framework, introducing joint processing, and recognizing "legitimate interest" more broadly while guaranteeing users a clear right to object and request deletion. Participants also noted that differing levels of identifiability and context call for differentiated regulation, and that data learned by AI models may remain even after deletion from databases.

Security전자신문

AI Security Race Shifts from 'Detection' to 'Automated Response'… Market Growth Also Accelerates

AI-driven cyberattacks are shifting the competitive focus of the global security market from threat detection and analysis to real-time blocking and automated response. Fortinet, Tenable, and F5, which recently reported earnings, said their security approaches have changed as AI attacks spread, and they expect security investment to grow as a result. F5 said its AI-based web application firewall blocked multiple attack variants in its own tests without new blocking rules after a recent PHP vulnerability disclosure.