Long-standing vulnerability identified in Microsoft Secure Boot firmware shims

Researchers at ESET discovered that Microsoft Secure Boot has been susceptible to bypass for 13 of its 14 years due to the continued signing of defective firmware images known as shims. The vulnerability allows attackers to circumvent firmware-level protections on both Windows and Linux devices, though the full scope of exploitation remains uncertain.