11 Old MicrosoftSigned Linux UEFI Shims Could Let Attackers Bypass Secure Boot

Cybersecurity researchers have discovered 11 old Microsoftsigned Unified Extensible Firmware Interface UEFI applications that could be abused to bypass Secure Boot on most systems using the modern firmware standard An attacker exploiting one of these vulnerable applications can execute untrusted code during system boot enabling deployment of malicious UEFI bootkits or other malware