SecurityArs Technicaabout 4 hours ago
11 Old Microsoft-Signed Shims Bypass Secure Boot
2 min read
ESET researchers discovered 11 old Microsoft-signed UEFI shim bootloaders that bypass Secure Boot on most systems. The outdated shims, some from 2013, allow attackers to execute arbitrary code during boot, deploying bootkits like Bootkitty or BlackLotus. Microsoft revoked the shims in its June 2026 Patch Tuesday update.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMicrosoft
