> TritonInfoSec News
Home / Jul 16, 2026 / Story
0
#5 Ars Technica Security general July 14, 2026 at 22:20 UTC

Microsoft’s Secure Boot has been broken for a decade and no one noticed until now

By Dan Goodin

AI Summary

A decade-old Secure Boot blind spot has been uncovered: nearly a dozen vulnerable UEFI shim bootloaders that Microsoft failed to revoke remained trusted in the Secure Boot chain for years, giving attackers a reliable path to bypass Secure Boot protections on affected systems. The oversight affects devices across multiple vendors and underscores the critical importance of maintaining the UEFI revocation database. No patch can fully close the gap until the revocation lists are updated across the installed base.

Read full article → https://arstechnica.com/security/2026/07/microsoft…

Relevance score: 86.0/100

# More from July 16

  1. 1
    Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days BleepingComputer
  2. 2
    Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands The Hacker News
  3. 3
    CISA warns admins to patch actively exploited SharePoint flaws BleepingComputer
  4. 4
    Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday The Hacker News
  5. 6
    US charges alleged operators of Russian bulletproof hosting service BleepingComputer
  6. 7
    Microsoft Patches a Record 570 Security Flaws Krebs on Security
  7. 8
    New phishing kits target Microsoft 365 accounts, evade MFA BleepingComputer
  8. 9
    Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware The Hacker News
  9. 10
    23andMe reaches $18 million settlement with states for massive breach The Record