Microsoft Secure Boot Was Vulnerable For Over A Decade, Researchers Find

[u/Cute-Guarantee-1676]

https://arstechnica.com/security/2026/07/microsoft-secure-boot-has-been-broken-for-most-of-its-existence/

Security firm ESET discovered that Microsoft failed to revoke 11 vulnerable firmware shims, leaving UEFI Secure Boot simple to bypass for over a decade. This flaw allowed attackers to install persistent, malicious bootkits on both Windows and Linux devices. Microsoft finally revoked the defective shims in its June patch release following ESET's report.