Apple stops iOS 16.6 signature verification. IPhone cannot downgrade iOS 16.6.1 after upgrading it.

CTOnews.com Sept. 15: Apple stopped signature verification of iOS 16.6 today after it released an update to iOS 16.6.1 on Sept. 7, meaning that users who have upgraded cannot be downgraded.

Apple usually stops signing the old version of iOS after the new version is released to encourage customers to keep the operating system up-to-date, so it is not uncommon for iOS 16.6 update not to be signed.

CTOnews.com previously reported that Apple focused on fixing two vulnerabilities in its Pegasus monitoring software used by NSO Group Group in its recently updated iOS 16.6.1.

Citizen Lab said in a blog post that the tracking numbers of these two vulnerabilities are CVE-2023-41064 and CVE-2023-41061, respectively. Attackers use the above vulnerabilities to create pictures containing malicious code and distribute them through PassKit attachments.

Related readings:

"for iPhone users, please update iOS 16.6.1. Apple fixes 2 vulnerabilities in Pegasus spyware."

"Apple iOS 16.6.1 official release: fixing ImageIO vulnerabilities"