Israel has mandatory military service. They grab the most promising teenagers and give them insanely good cybersecurity training on the government's dime. They do their mandatory service, maybe spend a few more years in the unit, then move on to the private sector. Most, if not all, of Israel's tech companies in the cybersecurity/surveillance sector are related to Unit 8200 for this reason.
But also: I think it's fair to say that Israeli spyware gets more media attention party because of geopolitical factors. Similar to Russian or Chinese spyware. I doubt the same headline would catch as much attention if you swapped Israeli-founded with Spanish-founded.
Smartphones are juicy targets. Most people have one, originally by choice and now by social mandate. And people have a habit of loading lots of personal data on them - at a minimum, just by using the location features on the device, which produces a near-perfect location tracking log. Lots of governments would love nothing more than to have access to telepathy - i.e. actual mind reading - to figure out which citizens were loyal, disloyal, engaged in criminal behavior, etc. And having a full unencrypted phone backup is basically a mind rip.
The only countries that aren't interested in mobile spyware are countries not big enough to afford a spyware engineering org.