Microsoft’s Secure Boot has been bypassable for 13 years due to unsigned shims
ESET researchers found that Microsoft’s Secure Boot has been vulnerable for most of its 14‑year life because outdated shim binaries, signed by Microsoft, were never revoked. Those shims let attackers defeat firmware protection on Windows and Linux machines, leaving a massive fleet exposed to boot‑time malware.