Indian authorities alert Apple users to numerous security flaws
Indian authorities alert Apple users to numerous security flaws
Share:

New Delhi: Users of the Apple Watch, TV, and MacBook have been advised of medium-to-high severity vulnerabilities by the Indian Computer Emergency Response Team, or CERT-In.

To protect their data from prying eyes, users are urged to update their devices with the most recent watchOS, tvOS, and macOS versions by the nodal agency under the Ministry of Electronics and Information Technology (MeitY).

Cybersecurity threats like hacking and phishing are guarded against by CERT-In. It involves a team of information security specialists who want to improve the safety of India's online presence.

Also Read: Helsinki's decision to join NATO will "negatively" impact its relations with Russia

Between March 31 and April 3, the MeitY wing published a number of advisories on its official website warning Apple product users and urging them to take immediate precautions.

Safari (versions prior to 16.4), Apple's in-house web browser, has been impacted by multiple vulnerabilities, according to a notification from March 31.
These weaknesses can be used by the attackers to convince a victim and access their system's data. According to CERT-In, the vulnerability was caused by "improper state management" and the disclosure of origin information in the WebKit component.

Also Read:  US starting to plan 'countermeasures' against North Korea with allies in Asia

Additionally impacted are several tvOS and WatchOS versions prior to 16.4 and 9.4, respectively. The tvOS and WatchOS versions have been reported to have vulnerabilities that could let hackers override privacy settings, run arbitrary code with kernel preferences, and gather sensitive user data, according to the nodal agency. There have been numerous reported causes, including AppleMobileFileIntegrity, Identity Services, TCC, Find My Shortcuts, and WebKit.

For Macs running macOS Ventura, Big Sur, and Monterey with versions prior to 13.3, 11.7.5, and 12.6.4, respectively, CERT-In has also reported vulnerabilities. The flaws could give attackers access to sensitive data disclosure, VPN server spoofing, security bypass, root privileges, information reading or modification, arbitrary code execution, and even a denial of service condition on a Mac.

Memory problems, improper checks and input validation, poor state management, privacy and logic problems, and an outdated VIM version are all causes of the flaws in macOS Ventura, Big Sur, and Monterey. These flaws can be exploited by hackers using specially designed apps.

Also Read:  U.S. Air Force has chosen to ease its recruiting difficulties by allowing Americans who are heavier to enlist in the military

To protect their data, CERT-In advises users to update their systems with the most recent patch. Go to the Mac App Store and select "Updates" from the toolbar to upgrade Safari. Now, download and install any listed update using the "Update" button. People are also advised to purchase the most recent versions of Apple's tvOS, watchOS, and macOS.

Join NewsTrack Whatsapp group
Related News