Experts find attackers can exploit decades-old UEFI flaws to gain access to key systems

Almost a dozen vulnerable UEFI shim bootloaders discovered and revoked.
Neowin

Microsoft bizarrely adds half-baked UEFI Secure boot to Windows 7 right before killing it0 0

The extended support updates (ESU) on Windows 7 ends today. Interestingly and rather bizarrely, Microsoft enabled native UEFI and Secure Boot. However, the new feature support is not without flaws.

ESET Research discovers vulnerable UEFI shims undermining devices’ Secure Boot

ESET researchers discovered 11 old, Microsoft-signed, UEFI applications that allow bypassing UEFI Secure Boot on the majority of UEFI-based ...
latesthackingnews.com

11 Old Signed UEFI Shims Just Broke Secure Boot on Millions of PCs

ESET found 11 Microsoft-signed UEFI shims, some over a decade old, that let attackers bypass Secure Boot without a single new ...

Your Windows PC is at risk if you’re missing these security certificates

Microsoft is pushing out a fix to a bigger number of affected computers, but your PC may need your help to receive them.
WeLiveSecurity

Forgotten UEFI shims undermining Secure Boot

ESET researchers discovered 11 vulnerable UEFI shim bootloaders signed by Microsoft that allow attackers to bypass UEFI ...
Bleeping Computer

Source code for BlackLotus Windows UEFI malware leaked on GitHub

The source code for the BlackLotus UEFI bootkit has leaked online, allowing greater insight into a malware that has caused great concern among the enterprise, governments, and the cybersecurity ...