Apple sends out threat notifications to users targeted by spyware.

Apple warned users in 110 countries about targeting by mercenary spyware and recommended Lockdown Mode and expert help; SOCRadar attributes a major March supply-chain compromise affecting ~2,500 organizations to a hijacked Trivy build that enabled poisoned LiteLLM releases and a credential stealer; Symantec profiles Jewelbug, a China-linked hack-for-hire group conducting both espionage and financially motivated cryptocurrency fraud using the same control infrastructure.