Why CERT-In is asking iPhone, iPad and Mac users in India to immediately update their devices

If you are already on the latest version of the software for these devices, you are safe as Apple has patched vulnerabilities with the latest security update.

The Indian Computer Emergency Response Team (CERT-In) has issued a “high” severity warning for Apple product users in India about software vulnerabilities on iPhones, iPads, and Macs. According to CERT-In, which is part of the Ministry of Electronics and Information Technology, these vulnerabilities could allow hackers to easily attack these devices and steal sensitive information.

CERT-In recommends users update their Apple products to the latest available version to secure their devices. The list of affected devices includes:

iOS and iPadOS versions prior to 17.6 and 16.7.9 (iPhones and iPads)
macOS Sonoma versions prior to 14.6 (Macs)
macOS Ventura versions prior to 13.6.8 (Macs)
macOS Monterey versions prior to 12.7.6 (Macs)
watchOS versions prior to 10.6 (Apple Watch)
tvOS versions prior to 17.6 (Apple TV)
visionOS versions prior to 1.3 (Vision Pro)
Safari versions prior to 17.6 (iPhone, iPad, Mac, Vision Pro)

Due to the high severity rating of these vulnerabilities, users may experience issues such as sensitive information disclosure, denial of service, security bypass, spoofing attacks, arbitrary code execution, and cross-site scripting-related problems.

If you are already using the latest software for these devices, this will not be an issue, as Apple has patched these vulnerabilities with the latest security update. However, if you have not yet installed the latest version, it is recommended that you do so to secure your Apple device.

Apple has also been sending alerts about “mercenary spyware attacks” to high-profile individuals, including politicians, journalists, and government officials, in over 150 countries, including India. If Apple believes a device is compromised, the user will be notified and can engage the device in lockdown mode to prevent data and device cyber attacks.

Source