Forgotten Bootloaders Expose Secure Boot Blind Spot

ESET identified 11 outdated Microsoft-signed UEFI shim bootloaders that could be used to bypass Secure Boot and execute persistent malicious code at boot time; Microsoft issued revocations in June, but many systems that haven’t applied Secure Boot deny-list updates remain at risk, particularly in enterprise and OT environments where firmware updates lag.