Security alert for Apple users: Govt issues 'high risk' advisory for several devices; check the full list

The Indian Computer Emergency Response Team (CERT-In) has issued a severe warning regarding critical vulnerabilities in Apple products. The advisory, dated August 2, flags high-risk security issues across various Apple devices, including iPhones, iPads, Macs, and other products.

Apple Security Alert: Vulnerable Software Versions

The vulnerabilities affect several versions of Apple software:

• iOS and iPadOS: Versions prior to 17.6 and 16.7.9
• macOS: Versions prior to 14.6 (Sonoma), 13.6.8 (Ventura), and 12.7.6 (Monterey)
• watchOS: Versions prior to 10.6
• tvOS: Versions prior to 17.6
• visionOS: Versions prior to 1.3
• Safari: Versions prior to 17.6

CERT-In has highlighted that these vulnerabilities could allow attackers to access sensitive information, execute arbitrary code, bypass security restrictions, cause denial of service (DoS), and perform spoofing attacks. The advisory describes the severity of these flaws as "high."

Apple Security Alert: Immediate Update Required

CERT-In urges all Apple users to promptly install the latest software updates provided by Apple to address these vulnerabilities and mitigate potential risks. The advisory underscores the critical nature of these security flaws and the need for immediate action to protect against possible attacks.

Apple Security Alert: Spyware Alert

In addition to the vulnerabilities, Apple has alerted users about potential "mercenary spyware attacks," akin to the Pegasus spyware. These alerts, sent to users across over 150 countries, including India, are intended to warn about sophisticated spyware threats targeting iPhones. Notable figures, including Iltija Mufti, media adviser and daughter of former Jammu and Kashmir Chief Minister Mehbooba Mufti, and Pushparaj Deshpande, founder of Samruddha Bharat Foundation, have reported receiving these warnings.

Apple Security Alert: Government and Company Responses

The Ministry of Electronics and Information Technology (MeitY) and Apple have yet to respond to inquiries regarding these issues. CERT-In continues to monitor the situation and advises users to stay informed about the latest security updates.

The central government’s advisory emphasizes the high risk associated with these vulnerabilities and urges users to take immediate steps to secure their devices.