Center issues ‘high risk’ warning to iPhone, iPad and MacBook users

CERT-In recommends taking various precautions to avoid the risk of leakage

New Delhi:

Indian Computer Emergency Response Team (India Computer Emergency Response Team)CERT-Enter) has issued a “high risk” warning to users of Apple’s iPhone, MacBook, iPad and Vision Pro headphones. The advisory highlights critical vulnerabilities related to “remote code execution” in various Apple products.

The vulnerability affects a range of Apple software and hardware, including Apple Safari prior to 17.4.1, Apple macOS Ventura prior to 13.6.6, Apple macOS Sonoma prior to 14.4.1, ApplevisionOS prior to 1.1.1, 17.4. 1 versions of Apple iOS and iPadOS prior to 16.7.7 and versions of Apple iOS and iPadOS prior to 16.7.7.

This vulnerability poses a significant threat because it allows a remote attacker to execute arbitrary code on the target system. The vulnerability exploits an out-of-bounds write issue in WebRTC and CoreMedia, allowing an attacker to remotely compromise the device.

According to the advisory, users of iPhone XS, iPad Pro 12.9-inch, iPad Pro 10.5-inch, iPad Pro 11-inch, iPad Air, iPad, and iPad mini are vulnerable if they are running versions of iOS and iPadOS prior to 17.4. .1. In addition, if iPhone 8, iPhone 8 Plus, iPhone , they will be at risk. .

MacBook users are also urged to update their systems, with macOS Ventura versions prior to 13.6.6 and macOS Sonoma versions prior to 14.4.1 being vulnerable. Additionally, users of Apple Vision Pro headsets should be aware of vulnerabilities in visionOS versions prior to 1.1.1.

CERT-In recommends taking several precautions to avoid the risk of damage:

Make sure Apple iOS, iPadOS, macOS, and visionOS are updated to the latest versions that include security patches.

Network Security: Avoid connecting to unsecured or public Wi-Fi networks to minimize the risk of unauthorized access.

Enable two-factor authentication (2FA): Implement 2FA to add an extra layer of security and prevent potential credential compromise.

Download from trusted sources: Only download apps and software from reputable sources like the Apple App Store to reduce the risk of malware.

Regular backup: Back up important data regularly to prevent data loss due to security holes or system failures.