11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot

AI Summary

Researchers discovered 11 Microsoft-signed UEFI Linux shim applications that were never revoked and can be abused to bypass Secure Boot on most modern systems. An attacker exploiting these legacy shims can execute untrusted code at boot time, enabling deployment of UEFI bootkits or persistent firmware-level malware. The decade-long oversight underscores the systemic risk of inadequate UEFI revocation list management.

Read full article → https://thehackernews.com/2026/07/11-old-microsoft…

Relevance score: 89.0/100

# More from July 15

1
Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack The Hacker News
2
SonicWall warns of SMA1000 flaws exploited in zero-day attacks, patch now BleepingComputer
4
SAP Patches CVSS 9.9 NetWeaver ABAP Flaw That Could Expose or Modify Data The Hacker News
5
OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials The Hacker News
6
Microsoft Maps Year-Long ShinyHunters-Linked Salesforce Data Theft Across Three Paths The Hacker News
7
Progress confirms ShareFile zero-day flaw behind Storage Zone shutdown BleepingComputer
8
U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support The Hacker News
9
US unseals indictment against alleged operators of Russian bulletproof hosting service The Record
10
Multiple Jscrambler Packages Impacted by Supply Chain Attack SecurityWeek