11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot
Cybersecurity researchers at ESET have discovered 11 old, Microsoft-signed UEFI shim bootloaders that could be exploited to bypass Secure Boot protections on…
Tag: Secure Boot
CVE-2026-10797: UEFI Shim Certificate Revocation Bypass
CVE-2026-10797 refers to a long-patched issue in UEFI shim that allowed the certificate-based revocation mechanism to be bypassed by modifying the second-stage…
Bootkitty: UEFI Bootkit Malware
Bootkitty is a UEFI bootkit that can be deployed by exploiting vulnerable UEFI shim bootloaders to bypass Secure Boot and gain persistent…
HybridPetya: UEFI Bootkit Malware
HybridPetya is a UEFI bootkit that can be deployed by exploiting vulnerable UEFI shim bootloaders to bypass Secure Boot and gain persistent…
BlackLotus: UEFI Bootkit Malware
BlackLotus is a UEFI bootkit that can be deployed by exploiting vulnerable UEFI shim bootloaders to bypass Secure Boot and gain persistent…
Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Execute Code at Boot
Researchers at firmware security firm Binarly have discovered six new vulnerabilities in U-Boot, the widely used bootloader for devices ranging from home…
CVE-2026-33243: U-Boot Signature Verification Bypass
A vulnerability in U-Boot's FIT image signature verification allowed a tampered image to swap in unsigned components, bypassing integrity checks. Patched in…
CERT/CC: Cybersecurity Coordination Center
The CERT Coordination Center issued an advisory about the vendor-specific bootloaders not being updated to address vulnerabilities in the upstream shim project.
Weekly Cybersecurity Recap: Linux Kernel Flaws, AI Malware, Turla Backdoor, and Infostealers
This week's cybersecurity landscape highlighted significant threats including a new Linux kernel flaw, AI-assisted malware, and active exploitation of critical vulnerabilities. The…
CVE-2026-8863: UEFI Shim Bootloader Vulnerability
CVE-2026-8863 is a vulnerability in old Microsoft-signed UEFI shim bootloaders that allows attackers to bypass Secure Boot protections and execute arbitrary code…