Eset

11 Old Microsoft-Signed UEFI Shims Left Secure Boot Bypassable for 13 Years

ESET found that 11 old UEFI shim bootloaders, still validly signed under Microsoft's third-party CA, let attackers bypass Secure Boot on any UEFI machine that trusts that certificate — no exploit development required.