Be aware if using any Apple devices, high-risk security flaws introduced by CRET
Highly critical security vulnerabilities have been discovered in various Apple products, putting your personal information and device control at risk. CERT-In, India's cybersecurity agency, issued a high-severity alert urging immediate action.
Key Highlights:
- Affected Devices: iPhones, iPads, Macs, Apple Watches, and more.
- Potential Risks: Data theft, device hijacking, DoS attacks, bypassed security, and unauthorized access.
- Urgent Action: Update all software to the latest versions (iOS 17.2, iPadOS 17.2, etc.).
Vulnerability Scope:
- iOS & iPadOS: Versions before 17.2 and 16.7.3 (actively exploited vulnerabilities: CVE-2023-42916 and CVE-2023-42917).
- macOS: Sonoma versions before 14.2, Ventura versions before 13.6.3, Monterey versions before 12.7.2.
- tvOS: Versions before 17.2.
- watchOS: Versions before 10.2.
- Safari: Versions before 17.2.
Potential Consequences:
- Data Theft: Hackers could steal your passwords, contacts, photos, and even financial information.
- Device Hijack: Malicious actors could take control of your device and use it for their purposes.
- DoS Attacks: Your device could be overwhelmed with traffic, rendering it unusable.
- Security Bypass: Attackers could gain unauthorized access to your system.
- Elevated Privileges: Hackers could gain complete control over your device.
Urgent Security Measures:
- Update immediately: Install the latest software versions on all your Apple devices.
- Prioritize iOS & iPadOS: Update these versions first due to active exploitation.
- Enable automatic updates: Ensure future patches are received automatically.
- Beware of links & attachments: Avoid suspicious ones, as they could exploit vulnerabilities.
- Strong passwords & 2FA: Use unique passwords and enable two-factor authentication for added security.