Live
- Additional Collector Conducts Surprise Visit to Boys' Hostel in Wanaparthy
- Punjab hikes maximum state-agreed price for sugarcane, highest in country
- Centre okays PAN 2.0 project worth Rs 1,435 crore to transform taxpayer registration
- Punjab minister opens development projects of Rs 120 crore in Ludhiana
- Cabinet approves Atal Innovation Mission 2.0 with Rs 2,750 crore outlay
- Centre okays Rs 3,689cr investment for 2 hydro electric projects in Arunachal
- IPL 2025 Auction: 13-year-old Vaibhav Suryavanshi becomes youngest player to be signed in tournament's history
- About 62 lakh foreign tourists arrived in India in 8 months this year: Govt
- IPL 2025 Auction: Gujarat bag Sherfane Rutherford for Rs 2.60 cr; Kolkata grab Manish Pandey for Rs 75 lakh
- Assam CM meets Governor, cabinet expansion on the cards
CERT-In Issues Critical Security Alert for Apple Users: Update Your Devices Now
Severe vulnerabilities in Apple devices pose risks of data theft and unauthorized access. Users must update iPhones, iPads, Macs, and Safari immediately.
Apple users face a critical security threat, as highlighted in an urgent advisory from the Computer Emergency Response Team (CERT-In). Issued on November 21, 2024, the alert warns of severe vulnerabilities affecting Macs, iPhones, iPads, and Safari browsers, which could expose devices to cyberattacks. CERT-In has urged users to update their devices immediately to safeguard against potential breaches.
Identified Vulnerabilities
The advisory points to two major vulnerabilities:
Execution Vulnerability (CVE-2024-44308):
Found in Safari’s JavaScriptCore component, this flaw allows attackers to inject malicious web content, potentially executing arbitrary code on affected devices.
Cross-Site Scripting (XSS) Vulnerability (CVE-2024-44309):
This vulnerability is located in WebKit, Safari’s engine, enabling attackers to exploit user sessions or steal sensitive information via harmful scripts.
These flaws make devices vulnerable to unauthorized access, data manipulation, and malicious activities.
Devices at Risk
The vulnerabilities affect Apple devices running Intel-based systems, including macOS, iOS, and iPadOS. Attackers can exploit these issues to compromise personal data or even take control of affected systems.
How to Protect Your Device
- To mitigate these risks, CERT-In recommends these updates:
- iPhones and iPads: Upgrade to iOS 18.1.1 or iOS 17.7.2, depending on your model.
- Macs: Update to macOS Sequoia 15.1.1.
- Apple visionOS: Install version 2.1.1.
- Safari browser: Upgrade to version 18.1.1.
- Staying updated with these patches is crucial to protecting your device from evolving cyber threats.
Stay Alert
Cybercriminals are constantly finding ways to exploit vulnerabilities, making regular updates essential for security. Apple users should prioritize these upgrades to prevent unauthorized access, data theft, or control of their devices. By maintaining updated software, you can ensure your personal information remains safe in an increasingly digital world.
