India’s CERT-In Warns of High-Severity Apple Flaws Affecting Crypto Users

  • CERT-In warned about high-severity vulnerabilities across Apple operating systems and software.
  • Apple’s updates cover devices and software including iOS before 26.7 and Safari before 27.
  • CERT-In said the vulnerabilities had not been exploited and urged users to install Apple’s fixes.

India’s Computer Emergency Response Team, CERT-In, issued a high-severity warning covering vulnerabilities in Apple’s operating systems and software. The agency said the flaws could let remote attackers execute arbitrary code, elevate privileges, obtain sensitive information, bypass security restrictions or trigger denial-of-service conditions, with potential impacts including complete system compromise, data theft and service disruption. CERT-In said it had no report that the vulnerabilities had been exploited, and Apple has already released updates that address them. The warning covers iOS and iPadOS before version 26.7, macOS Golden Gate before 27, macOS Tahoe before 26.7, macOS Sequoia before 15.8, tvOS, watchOS and visionOS before 27, Safari before 27, and Xcode before 27. The note does not identify any cryptocurrency wallet, exchange application or crypto-specific attack. The risk for crypto users is that a fully compromised device could expose wallet apps, exchange credentials or recovery phrases stored on the device. Earlier reporting separately said Ledger Chief Technology Officer Charles Guillemet had warned about the DarkSword attack targeting iPhone Safari users, while Apple fixed six related vulnerabilities in iOS 26.3 after reported exploitation beginning around November 2025. Users should install Apple’s security updates, keep substantial holdings in a hardware wallet rather than a phone, and avoid storing recovery phrases as photos or plain-text files on internet-connected devices.

The information on this website is generated using AI and we cannot guarantee its accuracy. Please use it as reference information only.