Forgotten UEFI shims undermining Secure Boot

Researchers at ESET discovered 11 old, Microsoft-signed UEFI shim bootloaders from 2026-02-16 that could bypass UEFI Secure Boot on most systems. These shims, used by various software packages, allowed attackers to deploy malicious UEFI bootkits, even on systems with Secure Boot enabled. The vulnerabilities were addres…