Govt issues high-risk warning for Apple users, ask them to update iPhone, Macbook and other devices

The Computer Emergency Response Team (CERT-In), a division of India's Ministry of Electronics and Information Technology, has issued a "high" security risk alert for Apple device users. On its official website, CERT-In warns of multiple vulnerabilities that, if left unaddressed, could allow unauthorised access to users' phones and the theft of sensitive data.

CERT-In has warned that the WebKit browser engine, used by Safari and other browsers, has serious security vulnerabilities that could have severe consequences for users of Apple devices such as the iPhone and Apple Watch. These vulnerabilities could allow attackers to trick users into visiting malicious websites or opening malicious attachments. This could further give bad actors access to the user's personal information and files, and even the ability to install malware on the user's device.

"Multiple vulnerabilities have been reported in Apple products which could allow an attacker to execute arbitrary code, escalation of privileges or bypass security restrictions on the targeted system," reads the official note. "Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code, escalation of privileges or bypass security restrictions on the targeted system."

In other words, Apple device users are at risk of having their personal information stolen or their devices infected with malware if they are not careful about what links they click on or what attachments they open.

List of Apple devices at risk

CERT-In notes "these vulnerabilities are being exploited in the wild against versions of iOS before iOS 16.7.". Here is the list of Apple devices at the risk of vulnerability.

• Apple macOS Monterey versions prior to 12.7
• Apple macOS Ventura versions prior to 13.6
• Apple watchOS versions prior to 9.6.3
• Apple watchOS versions prior to 10.0.1
• Apple iOS versions prior to 16.7 and iPadOS versions prior to 16.7
• Apple iOS versions prior to 17.0.1 and iPadOS versions prior to 17.0.1
• Apple Safari versions prior to 16.6.1

How to stay safe

As per the national authority responsible for overseeing cybersecurity issues across various software releases, it is strongly recommended that individuals concerned about safeguarding their personal data promptly install the most recent updates for watchOS, tvOS, and macOS on their Apple devices. Neglecting to address software vulnerabilities in Apple watches, TVs, iPhones, and MacBooks could potentially expose these devices to unauthorised access by malicious actors. Apple has also supplied the necessary upgrades to fix this issue on the official website, cert-in.org.in.

Furthermore, users of the Apple iPhone, iPad, and WatchOS can benefit from the latest software version, which incorporates enhanced security features and device enhancements.