Centre Issues 'Severe' Warning For Apple Users Over Multiple Vulnerabilities

The Indian Computer Emergency Response Team (CERT-In) has issued a "severe" warning to all Apple users, highlighting multiple vulnerabilities in Apple products such as iPhones, iPads, Macs, and more. These vulnerabilities could lead to leaks of sensitive information, arbitrary code execution, security bypasses, denial of service (DoS) attacks, and spoofing attacks.

According to the CERT-In advisory dated August 2, the affected Apple software includes iOS and iPadOS versions prior to 17.6 and 16.7.9, macOS Sonoma versions prior to 14.6, macOS Ventura versions prior to 13.6.8, macOS Monterey versions prior to 12.7.6, watchOS versions prior to 10.6, tvOS versions prior to 17.6, visionOS versions prior to 1.3, and Safari versions prior to 17.6.

The central agency has urged Apple users to apply the necessary software updates as listed by the company to mitigate any high-level risks. Apple has not yet confirmed any security risk from their side.

In a related issue, Apple has been sending alerts about potential "mercenary spyware attacks," similar to Pegasus from the NSO Group, to users in over 150 countries, including India. These alerts were issued to warn users about sophisticated spyware aimed at remotely compromising iPhones.

Users are strongly advised to update their devices promptly to safeguard against these vulnerabilities and potential security threats.