The Indian Computer Emergency Response Team (CERT-In), under the Ministry of Electronics and Information Technology, has issued a critical security advisory for Apple users in India. The warning highlights multiple vulnerabilities in iOS and iPadOS that could allow attackers to access sensitive data, execute unauthorized code, or even render devices completely unusable.
The vulnerabilities affect a broad range of devices, including iPhones running iOS versions prior to 18.3 and iPads operating on iPadOS versions earlier than 17.7.3 or 18.3, depending on the model. This encompasses devices such as the iPhone XS and newer models, iPad Pro (2nd generation and later), iPad 6th generation and above, iPad Air from the 3rd generation onwards, and iPad mini from the 5th generation upwards.
One of the critical flaws lies in the Darwin notification system—a key component of Apple's internal messaging framework. This vulnerability allows any application, even without special permissions, to send sensitive system-level notifications. If exploited, this flaw could potentially crash the device, rendering it unresponsive until manually restored.
Recommended Actions:
Update Devices: Apple has released security updates addressing these vulnerabilities. Users are strongly advised to update their devices to the latest available versions of iOS and iPadOS without delay.
Exercise Caution: Avoid installing unverified applications and remain vigilant for any unusual device behavior, which could indicate malicious activity.
As Apple's presence continues to grow in India, it's imperative for users to stay informed and proactive in safeguarding their devices against emerging digital threats.
Read more: link