Alert: Your Apple Device May Now Be Vulnerable To Cyberattacks
While you've been watching Apple release its news range of iPhone 16 devices, along with a slew of operating system upgrades, all last week, you might have missed something more critical. If you're using some older versions of Apple operating system, your device may be vulnerable to different forms of cyberattacks.
The Indian Computer Emergency Response Team, under the Ministry of Electronics and Information Technology, has released a “high-severity” warning regarding vulnerabilities discovered in several Apple products. Various Apple software versions, including iOS, iPadOS, macOS, watchOS and visionOS, are impacted by the CERT-In advisory.
The advisory covers:
iOS versions prior to 18 and 17.7.
iPadOS versions prior to 18 and 17.7.
macOS Sequoias versions prior to 15.
visionOS versions prior to 2.
watchOS versions prior to 11.
macOS Sonoma versions prior to 14.7.
macOS Ventura versions prior to 13.7.
tvOS versions prior to 18.
Safari versions prior to 18.
Xcode versions prior to 16.
Notably, Apple debuted the iPhone 16 on Sept. 9, which went available starting Sept. 20. The company last week also released software updates to most of its OS, such as iOS, macOS, iPadOS, watchOS, visionOS and tvOS.
The vulnerabilities reported in Apple products could allow an attacker to access users' sensitive information, execute arbitrary code, bypass security restrictions, cause denial of service conditions, bypass authentication, gain elevated privileges and perform spoofing attacks on targeted systems, according to the advisory.
Here's a breakdown of potential impact to Apple products:
Apple iOS and iPadOS versions prior to 18 or 17.7 could face DoS conditions, security restriction bypass, information disclosure and cross-site scripting.
macOS Sonoma versions prior to 14.7, Ventura versions prior to 13.7 and Sequoia versions prior to 15 may experience DoS, data manipulation, security restriction bypass, information disclosure, spoofing, elevation of privilege and cross-site scripting.
tvOS versions prior to 18 and watchOS versions prior to 11 face similar risks of DoS, information disclosure, security restriction bypass and cross-site scripting.
Safari and Xcode versions prior to 18 and 16, respectively, are vulnerable to similar risks.
visionOS versions prior to 2 may be at risk of DoS, data manipulation, security restriction bypass and information disclosure.
To reduce the risks, users are advised to update the software on their Apple devices to the most recent versions. It is also advised that users make sure appropriate cybersecurity safeguards are in place and keep an eye out for any suspected activity on their devices.
However, the latest versions of Apple OS haven't been free of problems too. Apple's macOS Sequoia, its latest desktop OS update, had last week reportedly disrupted the functionality of security tools created by providers such as CrowdStrike, Microsoft and SentinelOne, among others.
Users reported their Mac breakdowns post the latest OS update, problems with security products on the most recent macOS, and issues with DNS and firewall configuration on Mac.
-
Talking Points This Week: Leadership Shock At Nvidia, Earnings Strength, And The Fog Over Hormuz
The Anthropic IPO pricing and first trading day, Nvidia's upcoming earnings, and any fresh signals from Iran will set the tone for the following week.
-
Signature Play: The Classic Cocktail Is Dead. Or Is It?
Classic cocktails are disappearing from India's cocktail menus. But they're still being ordered, taught to bartenders and borrowed from. So, who's really having the last drink?
-
A New Samvat Wishlist: Inclusive Prosperity And Human Development
India has strengthened its economic foundations through infrastructure, digital access and enterprise. Its next growth chapter must deepen productivity, create better livelihoods and widen participation in prosperity.
-
Love, Sex Aur Dhokha: The Audacious Plot To Spy On Jensen Huang
A Taipei dinner, a Singapore chip buyer and a suspected Chinese asset: inside the alleged spy operation that got close to NVIDIA's Jensen Huang.
-
Ten Things I Learnt This Samvat
Patience can be a trap. Cheap stocks can stay cheap. Leverage can wipe you out. What did Samvat 2082 teach us? Niraj Shah writes on 10 lessons from the year gone by.
-
Talking Points This Week: Tech Nerves, FII Buying, And A Faraway Banking Shock
The global markets are not shining this Diwali. The exception in the large markets is, India.
-
Midterm Rally Lasted A Day. The Hard Reality Of A Divided US May Last Two Years | Opinion
Between a contested AI boom, a debt ceiling that arrives in 2027 and a president with every incentive to act alone, the next two years may prove more volatile than the first day's rally suggests.
-
Blue Wave Will Derail the AI Trade but Won't Dismantle the AI Era | Unhedged Position
The Democrats' sweep of the US Congress will see politics collide with economic forces both over the long and short term.
-
It's Time To Take The GST Council's Bet On Trust Global
Payment records can prove India's services exports, and clear, proportionate rules can bring foreign digital sellers into the tax net.
-
Opinion | India at 38: From Innovation Overperformer to Innovation Powerhouse
India now has 453 VC-backed deep science startups, 18 of them late-stage, after 117 percent growth since 2020. Laurus Labs, at USD 9.3 billion, is the most valuable deep science company in any middle-income economy outside China.