India's national cyber security agency, CERT-In, has reportedly issued a high-severity advisory (CIAD-2026-0056) on 28 October covering multiple vulnerabilities in Apple software, including iOS, iPadOS, macOS and Safari.
What's the risk?
According to the advisory as reported, attackers who exploit these flaws could run malicious code, gain higher privileges on a device, access sensitive information or bypass security protections. In practice, such bugs are often exploited through malicious websites, files or messages.
How to update
iPhone and iPad
- Connect to Wi-Fi and charge to at least 50%.
- Go to Settings → General → Software Update.
- Install the latest version available for your device.
- Turn on Automatic Updates on the same screen.
Mac
- Open System Settings → General → Software Update.
- Install all available updates, including Safari updates.
What if your device is too old?
Older iPhones and Macs that no longer get the latest software may still receive some security fixes for a while. If your device gets no updates at all, avoid using it for banking and UPI, and consider replacing it.
Good habits that help
- Don't open links or attachments from unknown senders, even on iMessage or WhatsApp.
- Download apps only from the App Store.
- Turn on two-factor authentication for your Apple Account.
- Enable Stolen Device Protection on iPhone (Settings → Face ID & Passcode).
CERT-In regularly publishes such advisories for Android, Chrome, Windows and other software. The safest default for every device is the same: keep automatic updates on.
