Apple has confirmed that its Lockdown Mode security feature, launched in 2022, has yet to be successfully bypassed by mercenary spyware. The company stated it is unaware of any successful attacks against a device with the optional, high-security mode enabled.
This affirmation, provided by Apple spokesperson Sarah O’Rourke to TechCrunch, marks a significant milestone for the protective measure. Lockdown Mode is an opt-in setting that disables certain device features commonly exploited by sophisticated spyware firms like NSO Group, Intellexa, and Paragon Solutions.
A Proactive Defence for At-Risk Users
Apple introduced Lockdown Mode specifically to help users who face extraordinary digital threats, such as journalists, activists, and diplomats. The feature restricts functionalities like message attachments and complex web technologies to "shrink the attack surface," making exploitation far more difficult and expensive for attackers.
Patrick Wardle, a noted Apple cybersecurity expert, described it as "one of the most aggressive consumer-facing hardening features ever shipped." He explained to TechCrunch that it "kills entire delivery mechanisms" and forces spyware makers to develop more complex techniques.
Independent Verification and Documented Success
Digital rights organisations have corroborated Apple's claim. Research from the University of Toronto’s Citizen Lab has documented at least two instances where Lockdown Mode actively blocked attacks involving NSO’s Pegasus and Intellexa’s Predator spyware.
In another case, security researchers at Google observed spyware designed to abort its infection attempt if it detected Lockdown Mode was active on a target iPhone, likely to avoid detection.
Apple has sent threat notifications to users in over 150 countries warning of potential mercenary spyware attacks, demonstrating the scale of the threat and the company's increased visibility into these operations.
Practical Use and Expert Recommendation
While the mode introduces minor inconveniences, such as requiring extra steps to open certain web links, security experts widely recommend it for anyone concerned about targeted digital attacks. The feature represents a critical layer of defence in an era where commercial spyware poses a significant threat to civil society.
Apple's latest statement, though the company is typically reserved in its communications, provides strong public confidence in the efficacy of Lockdown Mode as a bulwark against some of the world's most advanced digital surveillance tools.