/hardwire/media/media_files/2025/05/13/xpUBXqMDpJEFBJfqWnBZ.png)
Hacked
The Indian government’s cybersecurity agency, CERT-In, has issued a high-risk security alert for iPhone and iPad users, warning of a critical vulnerability affecting devices running older versions of iOS and iPadOS. Specifically, any version below iOS 17.3 or iPadOS 17.3 is potentially exposed to this threat, which could cause devices to freeze or even become completely unresponsive — also known as “bricking.”
What is the vulnerability?
The flaw originates from a core component in Apple’s operating systems called Darwin notifications, which allows different parts of the device to communicate. According to CERT-In, malicious apps — even those without special permissions — can exploit this mechanism to crash or lock up the device. Once triggered, the attack can render the iPhone or iPad unusable until it is reset, and in severe cases, the device may not recover at all.
Also Read: Realme 14T 5G With 120Hz AMOLED Display Launched in India: Price, Specs, and Key Features
Update your iPhone/iPad now
Apple has already addressed the issue by releasing updated versions of iOS and iPadOS. Users are strongly urged to install iOS 17.3/iPadOS 17.3 or later immediately to protect their devices. The update patches the vulnerability and helps safeguard against apps that might attempt to exploit the flaw.
In addition to updating their devices, Apple advises users to avoid installing apps from unknown or untrusted sources and to stay alert for suspicious activity, such as excessive battery drain, random app crashes, or overheating. These signs could indicate an attempt to exploit the vulnerability.
The warning comes shortly after Apple issued another global alert about spyware threats targeting select users. Some received direct notifications from Apple, warning them of potential surveillance attacks.
Bottom line: If you use an iPhone or iPad and haven’t updated to the latest software, do so immediately. This critical update could prevent your device from being disabled or compromised by malicious software.
Also Read: Tata Altroz New vs Old: Here's Everything You Need To Know