Security News Apple says no one using Lockdown Mode has been hacked with spyware

[Brownie2019]

Content source

https://techcrunch.com/2026/03/27/apple-says-no-one-using-lockdown-mode-has-been-hacked-with-spyware/

Almost four years after launching a security feature called Lockdown Mode, Apple says it has yet to see a case where someone’s device was hacked with these additional security protections switched on.

“We are not aware of any successful mercenary spyware attacks against a Lockdown Mode-enabled Apple device,” Apple spokesperson Sarah O’Rourke told TechCrunch on Friday.

It’s the tech giant’s most recent affirmation that Apple devices with Lockdown Mode can withstand government spyware attacks, after first making the claim a year after the security feature’s debut.

Apple in 2022 announced Lockdown Mode, an opt-in series of security protections that switches off certain features in iPhones and other Apple devices that are commonly exploited to hack targets with spyware. Apple specifically released this security mode to help at-risk customers defend themselves from the threats posed by government spyware made by companies like Intellexa, NSO Group, and Paragon Solutions.

Read more:

Apple says no one using Lockdown Mode has been hacked with spyware | TechCrunch

The tech giant's claim that it has not seen any successful spyware attacks targeting Apple devices with Lockdown Mode enabled comes amid a leak of hacking tools targeting users running devices with older software.

techcrunch.com

 

[Victor M]

Lockdown mode in use here. One click hardening, easy.

 

[Halp2001]

It’s interesting to see Apple standing by these results. Regardless of whether we use an iPhone or not, the underlying message is powerful: proactive security settings actually work.

However, it’s all about choosing our battles. If we go for a too strict configuration (like Lockdown Mode), we end up sacrificing a lot of functionality: many websites won’t load correctly, certain attachments will be blocked, and the overall experience becomes rigid. For most of us, the sweet spot is a 'reasonably strong' setup: applying layers that don’t break daily use (like 2FA, limiting app permissions, and auditing shared data). It’s not about paranoia; it’s about making it difficult for anyone trying to get in without losing the convenience of our devices.

 

[Victor M]

a too strict configuration

Nothing is too strict for me, I use my iphone as a phone only. I am not part of the generation that is glued to their phones even when crossing the street.

 

[oldschool]

It’s interesting to see Apple standing by these results. Regardless of whether we use an iPhone or not, the underlying message is powerful: proactive security settings actually work.

However, it’s all about choosing our battles. If we go for a too strict configuration (like Lockdown Mode), we end up sacrificing a lot of functionality: many websites won’t load correctly, certain attachments will be blocked, and the overall experience becomes rigid.

For those vulnerable to spyware attacks this is a huge accomplishment, though as you say for most of us "reasonably strong" is probably the way to go. But then again, spyware attacks are becoming more widespread as out-of-control govenments and criminal gangs become more aggressive.

 

[Halp2001]

My point isn’t to downplay Lockdown Mode, but to prevent unnecessary paranoia for the average user. These emergency protocols are for high-risk profiles —like activists or state-level targets— not for the daily life of most people.

Enabling them without a real need often breaks the everyday experience more than it helps. Effective security must be strong yet sustainable, without causing frustration or losing essential functionality. Ultimately, everyone should choose their settings based on their own needs and threat model.

 

[oldschool]

My point isn’t to downplay Lockdown Mode, but to prevent unnecessary paranoia for the average user. These emergency protocols are for high-risk profiles —like activists or state-level targets— not for the daily life of most people.

Enabling them without a real need often breaks the everyday experience more than it helps. Effective security must be strong yet sustainable, without causing frustration or losing essential functionality. Ultimately, everyone should choose their settings based on their own needs and threat model.

Indeed.