11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot

[Starburst-David]

Cybersecurity researchers have discovered 11 old, Microsoft-signed, Unified Extensible Firmware Interface (UEFI) applications that could be abused to bypass Secure Boot on most systems using the modern firmware standard.

"An attacker exploiting one of these vulnerable applications can execute untrusted code during system boot, enabling deployment of malicious UEFI bootkits or other malware," ESET researcher Martin Smolár said in a report published today.

Full article can be found at:
https://thehackernews.com/2026/07/11-ol ... -uefi.html


Published Date: Jul 14, 2026