SecurityThe Hacker Newsabout 2 hours ago
11 Old Microsoft-Signed UEFI Shims Bypass Secure Boot
1 min read
ESET researchers discovered 11 old Microsoft-signed UEFI shim bootloaders that bypass Secure Boot on most systems. The outdated shims allow attackers to execute untrusted code during boot, deploying bootkits like Bootkitty or BlackLotus. Microsoft revoked the shims in June 2026 Patch Tuesday. The vulnerabilities are tracked as CVE-2026-8863 and CVE-2026-10797.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMicrosoft
Summary by ByteBrief
