Updates Sources Laws Calendar

In CERT-IN updates

Reports of Apple Threat… — CIAD-2025-0048 | CERT-In advisory · Complied AI

Updates Laws Calendar Guides My Library

Updates/CERT-In/Detail

CERT-In05 Dec 2025advisoryPrepared by Complied AI

Reports of Apple Threat Notifications · CIAD-2025-0048

CERT-In advisory CIAD-2025-0048 · 05 Dec 2025

Official title

CIAD-2025-0048 : Reports of Apple Threat Notifications

Official record

Open source page

Summary

Check the official record

What changed

CERT-In advises users of Apple devices to implement security measures following reports of mercenary spyware attacks. Users must update their iPhone to iOS 26.1 and update all other Apple devices to the latest software version. Users must update messaging and cloud applications to the latest available version and enable Lockdown Mode. Users should refer to CERT-In Vulnerability Notes and apply appropriate patches. Users who receive threat notifications may contact CERT-In via email for technical assistance. Users must not reset, delete applications, or restart their devices to prevent evidence tampering.

What you must do

Update iPhone to iOS 26.1 and other Apple devices to the latest software version.
Update messaging and cloud applications to the latest available version.
Enable Lockdown Mode on Apple devices.

Document text

Prepared for reading; wording retained from the source.

Verify official record

CERT-In Advisory CIAD-2025-0048

Reports of Apple Threat Notifications

Original Issue Date: December 05, 2025

Description

It is reported that Apple issued notifications to its users across the world including India about being targeted by mercenary spyware attacks who are trying to remotely compromise the iPhone associated with their Apple ID. The notification also recommends users to take additional safeguards to protect data on their device, such as updating their iPhone (latest version iOS 26.1) and any other Apple devices they use to the latest software version, update messaging and clouds app to the latest available version, and enabling Lockdown Mode.

Users are strongly advised to update their devices as advised by Apple. Users are also recommended to refer CERT-In Vulnerability Notes and Advisories and apply appropriate patches for their devices.

Any user who has received such notification and wish to get their apple devices examined/ benefit from the technical assistance are requested to kindly reach out to CERT-In via email:
submitmobile@cert-in.org.in

Note: Do not make any changes to the phone (resetting, deleting applications, updating, restarting etc.) as these actions could tamper evidence.

References:

Remote Code Execution Vulnerability in Apple Product
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01VLCODE=CIVN-2025-0329

Multiple Vulnerabilities in Apple Products
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02VLCODE=CIAD-2025-0041

Denial of Service Vulnerability in Apple Products
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01VLCODE=CIVN-2025-0234

Multiple Vulnerabilities in Apple Products
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02VLCODE=CIAD-2025-0031

Out-of-Bounds Write Vulnerability in Apple Products
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01VLCODE=CIVN-2025-0184

Multiple Vulnerabilities in Apple Products
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01VLCODE=CIVN-2025-0163

Denial of Service (DoS) Vulnerability in Apple Products
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01VLCODE=CIVN-2025-0094

Multiple Vulnerabilities in Apple Products
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01VLCODE=CIVN-2025-0085

Multiple Vulnerabilities in Apple Products
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01VLCODE=CIVN-2025-0071

WebKit Vulnerability in Apple Products
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01VLCODE=CIVN-2025-0044

Security Bypass Vulnerability in Apple iOS and iPadOS
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01VLCODE=CIVN-2025-0019

Multiple Vulnerabilities in Apple Products
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02VLCODE=CIAD-2025-0006

Multiple Vulnerabilities in Apple Products
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02VLCODE=CIAD-2024-0058

Multiple Vulnerabilities in Apple Products
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02VLCODE=CIAD-2024-0052

Multiple Vulnerabilities in Apple Products
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02VLCODE=CIAD-2024-0046

Multiple Vulnerabilities in Apple Products
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02VLCODE=CIAD-2024-0038

Multiple Vulnerabilities in Apple VisionOS
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01VLCODE=CIVN-2024-0188

Multiple Vulnerabilities in Apple Products
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02VLCODE=CIAD-2024-0027

Remote Code Execution Vulnerability in Apple iTunes
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01VLCODE=CIVN-2024-0159

Remote Code Execution Vulnerability in Apple Products
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01VLCODE=CIVN-2024-0100

Multiple Vulnerabilities in Apple Products
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02VLCODE=CIAD-2024-0018

Multiple Vulnerabilities in Apple Safari
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01VLCODE=CIVN-2024-0091

Multiple Vulnerabilities in Apple iOS and iPadOS
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01VLCODE=CIVN-2024-0090

Multiple Vulnerabilities in Apple Products
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02VLCODE=CIAD-2024-0007

No provision was matched in this document with enough confidence to link it.

Browse source laws

Source details

Source: Indian Computer Emergency Response Team
Type: advisory
Published by source: 05 Dec 2025
Document number: CIAD-2025-0048
Issuing division: CERT-In
Coverage area: cybersecurity

Related CERT-In updates

Other recent records from the same regulator.

CIAD-2026-0055 : Out-of-Bounds Write Vulnerability in Google Brotli Decoder27 Oct 2026advisory
CIAD-2026-0054 : Multiple vulnerabilities in Fortinet Products24 Oct 2026advisory
CIAD-2026-0053 : Compromise of LiteLLM PyPI Package and Docker Images23 Oct 2026advisory
CIAD-2026-0051 : Multiple Vulnerabilities in Oracle Products22 Oct 2026advisory

Official record

Open source page

On this page

What changed
Document text
Source details
Related CERT-In updates

Statutory updates. Official sources. Acts & Rules.

Built for Indian compliance professionals.

hello@compliedai.com

Browse

Updates

Contact CERT-In via email for technical assistance if a threat notification is received.

Key dates

Original Issue Date: 05 Dec 2025

Who is affected

Apple users targeted by mercenary spyware attacks.

If you do not comply

Resetting, deleting applications, or restarting the device may tamper with evidence.

Prepared automatically from the captured official document and checked against source evidence. This is not an independent professional review. See how briefs are prepared. Verify material decisions against the official record.

CIAD-2026-0052 : Advisory to MSME - Remote code execution vulnerabilities in PHP (PHP2Shell)

22 Oct 2026·advisory

All CERT-In updates

Weekly summaries

Platform

AI compliance platform
Compliance calendar

Company

About
Why we built this
Editorial standards
Roadmap
What's new
Work with us
Contact

Support

Help
FAQ
Newsletter
Security

Legal

Privacy
Terms
Disclaimer
Cookies
Refunds

Browse+−

Updates
Weekly summaries
Sources
Laws
Guides

Platform+−

AI compliance platform
Compliance calendar

Company+−

About
Why we built this
Editorial standards
Roadmap
What's new
Work with us
Contact

Support+−

Help
FAQ
Newsletter
Security

Legal+−

Privacy
Terms
Disclaimer
Cookies
Refunds

© 2026 Complied AI. Built for Indian compliance work.