The Indian Computer Emergency Response Team (CERT-In), operating under the Ministry of Electronics and Information Technology, has issued a high-severity security advisory targeting users of certain Apple devices. The alert warns of multiple critical vulnerabilities affecting specific versions of iOS and iPadOS, which could potentially allow malicious actors to execute arbitrary code, steal sensitive data, or gain unauthorized control of affected devices.
The advisory highlights that these security flaws could be exploited remotely without any user interaction. According to CERT-In, the vulnerabilities lie in components such as the WebKit browser engine, kernel privileges, and third-party app integrations, making affected devices particularly susceptible to data breaches and malware attacks.
The devices identified in the advisory include the following:
- iPhone 8 and later models
- iPad Pro (all models)
- iPad Air third generation and later
- iPad fifth generation and later
- iPad mini fifth generation and later
Users running outdated versions of iOS or iPadOS are at the highest risk. The government has strongly recommended updating to the latest available software versions immediately to address these vulnerabilities. Apple has already released security patches as part of its latest iOS and iPadOS updates, which aim to fix these identified issues.
CERT-In has further warned that if these vulnerabilities are not addressed, attackers could use specially crafted web content or rogue applications to bypass device security. Once compromised, attackers may be able to access messages, photos, login credentials, and even activate the device microphone or camera without user consent.
This warning follows similar advisories issued by other international cybersecurity agencies, reflecting the growing concern around zero-day vulnerabilities and increasing sophistication of cyber threats. With a significant number of iPhone and iPad users in India, the alert aims to raise awareness about the urgency of applying updates and practicing good digital hygiene.
Cybersecurity experts suggest that in addition to updating the operating system, users should avoid clicking on suspicious links, refrain from downloading apps from unofficial sources, and regularly check their device settings for any unauthorized changes.
The Indian government has been stepping up its digital security initiatives, particularly in light of the rising number of cyberattacks targeting both private users and government infrastructure. This advisory is part of a broader effort to enhance public awareness and strengthen national cyber resilience.
Users can visit Apple’s official website or use the settings app on their devices to check for updates. CERT-In has also provided technical details for IT administrators and enterprises to take additional steps in protecting organization-wide Apple device deployments.
As digital threats continue to evolve, timely software updates and proactive security practices remain the most effective defense against potential cyberattacks.
