Apple iPhones on high-security alert, India urges swift action; CERT-in wants users to do this

India puts Apple iPhones on high-security alert, saying there is a clear threat to sensitive data of users. A similar alert was issued about Samsung devices earlier too.

India warns that Apple iPhones have just become a high-security threat. Users' data may get exposed to hackers. (Unsplash)

In a recent development, India's Computer Emergency Response Team of India (CERT-In) has issued a stark warning about Apple iPhones. It has shed light on a series of vulnerabilities detected in Apple products. These vulnerabilities, deemed high-risk, could potentially have serious repercussions for users as they may expose sensitive information, enable arbitrary code execution, bypass security measures, and trigger denial of service (DoS) conditions, among other potential threats.

iPhone Users Must Take Immediate Action: How to save your gadgets

Prompted by the alarming security landscape, users are strongly advised to take immediate action to safeguard their iPhones against potential exploitation.

What users can do, as per CERT-In, is to immediately take some action. It has emphasised the critical need for timely updates and proactive security measures to mitigate the identified risks. iPhone users must update their handsets to the latest OS security patch versions available as mentioned in Apple Security Updates.

Not sure which
mobile to buy?

Shocking Vulnerabilities

The gravity of the situation is further underscored by the cross-platform nature of these vulnerabilities. Users of both Apple and Samsung devices must remain vigilant, as attackers could exploit weaknesses in one ecosystem to compromise devices in another.

According to the latest advisory, the identified vulnerabilities impact various Apple products, encompassing iOS, iPadOS, macOS, tvOS, Apple watchOS, and the Safari browser predating 17.2. CERT-In has assigned a 'high' severity rating to these vulnerabilities, indicating potential risks such as authentication bypass, elevation of privileges, and the ability to execute "performing spoofing attacks on the targeted system."

This iPhone advisory from CERT-In closely follows a cautionary notice directed at Samsung users, emphasising critical security issues affecting devices operating on Android versions 11, 12, 13, and 14. Notably, the esteemed Galaxy S23 smartphone by Samsung faces implications due to the Android 14 update.

As we reported earlier, CERT-In's advisory also highlighted security vulnerabilities in Samsung devices operating on Android versions 11, 12, 13, and 14. Exploiting these vulnerabilities in Samsung devices could lead to unauthorised access to sensitive data stored on the affected devices. It is crucial for users to promptly update their Samsung smartphones to counter this security threat.

Government's Cyber Security Findings

A thorough examination by the government's cybersecurity team has unveiled several potential issues. These include insufficient access control in Knox features, integer overflow vulnerabilities in facial recognition software, authorization issues with the AR Emoji app, mishandling of errors in Knox security software, and various memory corruption vulnerabilities in diverse system components. Staying informed about these specific risks empowers users to take targeted actions to fortify their devices against potential security breaches.

CERT-In underscores the gravity of the risk by classifying it as high, emphasising the potential for attackers to exploit these vulnerabilities to bypass security protocols, access confidential information, and execute unauthorised code on targeted systems. The recognized vulnerabilities pose a substantial threat to various components within the Samsung ecosystem.

It is imperative for users of both Apple and Samsung devices to remain vigilant and take immediate action to secure their devices against potential threats. The reason behind the alert is that the risk has been found to be substantial and has left users quite vulnerable. And as such, there is an immediate requirement for users to keep track of what is happening on their smartphones and keep them updated to the latest version rolled out by the companies.