Your iPhone & Apple products may be vulnerable to attacks: Indian govt issues urgent warning

In a recent development, the Indian Computer Emergency Response Team (CERT-In) has issued a high-severity alert regarding security vulnerabilities found in various Apple products, including iPhones, watches, and MacBooks. These vulnerabilities could potentially allow hackers to run malicious code, elevate their privileges, or bypass security measures on affected devices.

High severity warning issued in India by CERT to Apple users on several vulnerabilities in iPhone, Apple Watch and MacBook on account of certificate validation issue in the security component, an issue in the kernel, and error in the WebKit.

Affected software’s in the photo pic.twitter.com/UqRTof339r

— Udit Kulshrestha (@uditkulshrestha) September 24, 2023

Concerning security issues

These security flaws in Apple products stem from problems within the Security component's certificate validation, the Kernel, and the WebKit component. These flaws can be exploited by attackers through carefully crafted requests, granting them elevated access rights on the targeted device.

Immediate action required

Users concerned about the safety of their personal data are strongly advised to update their devices to the latest watchOS, tvOS, and macOS versions immediately. Failure to address these software issues may leave devices vulnerable to unauthorised access by malicious actors.

Official guidance

CERT-In, the national nodal body overseeing cybersecurity-related matters in India, has provided guidance on its official website, cert-in.org.in, regarding the necessary updates to resolve these security issues. Following these instructions will help users safeguard their Apple watches, TVs, iPhones, and MacBooks.

List of affected software versions

The security vulnerabilities impact various Apple software versions, including:

1. Apple macOS Monterey versions prior to 12.7

2. Apple macOS Ventura versions prior to 13.6

3. Apple watchOS versions prior to 9.6.3

4. Apple watchOS versions prior to 10.0.1

5. Apple iOS versions prior to 16.7 and iPadOS versions prior to 16.7

6. Apple iOS versions prior to 17.0.1 and iPadOS versions prior to 17.0.1

7. Apple Safari versions prior to 16.6.1

In a commendable move, the Indian government has demonstrated its proactive stance in safeguarding its citizens against cyber security threats. The recent urgent warning issued regarding potential vulnerabilities in Apple products underscores the government's commitment to ensuring the digital safety and privacy of its citizens.

By promptly notifying users and providing guidance on necessary precautions, the government has not only raised awareness but also empowered individuals to take immediate steps to protect their personal data and devices. This proactive approach aligns with the broader mission of bolstering national cybersecurity and fostering a secure digital environment for all.