Millions of Devices Vulnerable to 'PKFail' Secure Boot Bypass Issue

Binarly disclosed a widespread Secure Boot weakness dubbed "PKFail" after discovering that an AMI Platform Key leaked in 2018 was reused in production firmware by multiple OEMs (including Lenovo, HP, Asus, SuperMicro). Because the compromised PK serves as a root of trust for UEFI Secure Boot, attackers with the private key can manipulate KEK/db/dbx to bypass Secure Boot and deploy persistent bootkits; a proof-of-concept exists and vendors must replace the key and issue firmware updates, though many systems may remain exposed until patches are widely applied.