Indian Apple customers have received medium- to high-severity alerts from CERT-In (Indian Computer Emergency Response Team), a national nodal organization that monitors cybersecurity-related issues.
The government has identified flaws in Apple TVs, Watches, and Mac computers that, if exploited, may grant an attacker “access to sensitive information.” Users are urged by the Ministry of Electronics and Information Technology’s agency to update their software right away. On the official website of CERT-In, you can access the government advisories released between March 31 and April 3.
The problems on Macs are in Apple’s exclusive Safari web browser. According to CERT-In, the WebKit component’s “improper state management” is the cause of the vulnerability. “A remote attacker could exploit these vulnerabilities by luring a victim to a specially constructed web page,” the alert continues. Of course, if the user chooses to provide information, sensitive data may wind up being obtained.
Users must update to Safari 16.4 from the current version. Open the Apple App Store desktop application, click Updates in the toolbar, and then use the Update buttons to download and install any updates that are listed to update the web browser.
To protect their security, Mac users are also encouraged to upgrade to the latest version of MacOS. Due to “memory issues, unsuitable checks, incorrect input validation, URL issues, incorrect bound checks, confidentiality, logic problems, race condition errors, using an older version of Vim, and inadequate state management issues,” according to CERT-In, there are “many vulnerabilities.”
The agency recommends users update to more recent watchOS and Apple tvOS versions. The problems affect devices running Apple WatchOS 9.4 and TvOS versions previous to 16.4.
Apple is aware of the issues because it is fixing these bugs in the most recent releases of macOS, tvOS, and watchOS. Users of the iPhone and iPad are advised to update to iOS 16.4 and iPadOS 16.4, even if there isn’t a warning.