India's government tells Apple users to update their devices now

India's national cyber agency, CERT-In, has told Apple users to update their devices now. The agency issued a high-severity warning on October 28 about security flaws in older versions of Apple software. Apple released fixes two days earlier, on October 26. If your device has not installed them, it is still exposed.

What changed

CERT-In says the flaws could let attackers run their own malicious code on a device, gain a higher level of access, steal sensitive information or get around security protections. In some cases, an attacker could also knock a device or system offline. The agency says an attack could start with specially crafted web content, files, images, audio or video, or through other vulnerable apps and system parts.

The advisory describes the technical causes, such as memory errors and timing problems. In plain terms, these are coding mistakes that a skilled attacker can abuse. The material does not say whether the flaws are already being used in real attacks.

Who it affects

The warning applies to individuals and to organisations. It covers a wide range of Apple products running software older than the October 26 updates:

• iPhone and iPad: iOS and iPadOS earlier than 18.7.11, 26.7.2 or 27.2, depending on the model.
• Mac: macOS Sequoia earlier than 15.8.2, Tahoe earlier than 26.7.2, or Golden Gate earlier than 27.2.
• Apple Watch, Apple TV and Apple Vision Pro: watchOS, tvOS and visionOS earlier than 27.2.
• Safari: versions earlier than 27.2 on compatible Macs running Sequoia or Tahoe.

Not every device can run the same update. The version a device can get depends on its model. CERT-In advises checking what is installed on each device instead of assuming they all match.

Who can relax

The warning is about older versions. If you have already installed the updates Apple released on October 26, you have the fixes. Devices set to update automatically may already be covered, though a quick check takes seconds.

What to do

The steps are in the alert box above. The main idea is to open the Software Update screen on each device and install what is offered. That includes the Watch, Apple TV and Vision Pro, which are easy to forget. An older device that cannot run the newest system may still have a security update for the version it supports.

What happens next

Apple has already done its part by releasing the fixes. What remains is getting them onto devices. For families, that means checking the older iPad in a drawer or a parent's phone. For businesses, it means checking staff laptops and phones. No deadline was given, but the agency's message is to update immediately.