Apple, Meta, and Google have introduced specialized security modes designed to protect devices against targeted spyware attacks, according to a new TechCrunch report. These features come as zero-click spyware attacks increasingly target journalists, activists, and political dissidents worldwide.
Key Takeaways
- Apple, Meta, and Google now offer special security modes to defend against targeted spyware
- WhatsApp notified roughly 90 European users in early 2025 of Paragon spyware targeting
- Zero-click attacks require no user interaction to compromise devices
What Happened
Major technology companies have rolled out enhanced security features specifically designed to counter sophisticated spyware threats. The development follows a series of documented attacks using Israeli company Paragon Solutions' surveillance tools.
In early 2025, WhatsApp sent notifications to approximately 90 users across Europe, warning them they had been targeted by Paragon spyware. Many of the targeted individuals were journalists and civil society members.
Several months later, Apple issued threat notifications to iOS users. Forensic analysis confirmed that two journalists had been successfully compromised using Paragon's Graphite spyware through zero-click attacks.
What Is Confirmed
According to TechCrunch's reporting, spyware attacks targeting journalists, human rights defenders, and political dissidents are no longer considered rare or exotic threats. The attacks documented involved Paragon Solutions, an Israeli spyware company.
The confirmed cases demonstrate the sophistication of modern surveillance tools. Zero-click attacks require no user interaction—victims don't need to tap links or download files to have their devices compromised.
The report indicates that Apple, Meta, and Google have developed special security modes in response to these threats, though specific details about how these protection features work remain limited in the available reporting.
Why It Matters
The emergence of zero-click spyware represents a significant escalation in digital surveillance capabilities. Traditional security advice—avoiding suspicious links or downloads—becomes ineffective against attacks that require no user action.
The targeting of journalists and civil society members raises concerns about press freedom and human rights advocacy. When reporters and activists cannot communicate securely, it affects their ability to investigate and report on sensitive topics.
The response from major technology companies suggests the threat level has reached a point where standard device security is insufficient for high-risk users. These specialized modes represent an acknowledgment that certain users face targeted threats requiring enhanced protection.
What Remains Unclear
The available reports do not specify exactly how the new security modes from Apple, Meta, and Google function. Technical details about the protective measures and their effectiveness against different types of spyware remain undisclosed.
The scope of spyware targeting beyond the documented Paragon cases is unknown. Whether other spyware companies are conducting similar campaigns or targeting different user groups has not been detailed in the current reporting.
The report does not indicate how users can activate these security features or whether they are available to all users or restricted to specific high-risk categories.
What To Watch Next
Users concerned about targeted surveillance should monitor official announcements from Apple, Meta, and Google regarding the availability and activation of these enhanced security modes. The companies may release additional guidance on who should use these features and how to enable them.
Future threat notifications from these platforms will indicate whether spyware targeting continues or expands to new victim categories. The effectiveness of the new protective measures will become apparent through reduced successful compromises or continued breach notifications.
Technology researchers and digital rights organizations are likely to analyze these new security modes once details become available, providing independent assessments of their protective capabilities against evolving spyware threats.
