Pulse of Truth

2463 readers

85 users here now

Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).

This community is automagically fed by an instance of Dittybopper.

Commenting rules:

Be respectful.
No bigotry (including racism, sexism, homophobia, transphobia).
No pornography.
Nothing illegal.
More rules will be added when necessary

founded 2 years ago

MODERATORS

krogoth@infosec.pub

11-Year-Old Linux UEFI Shim Bootloaders Let Attackers Bypass Secure Boot (cybersecuritynews.com)

submitted 2 hours ago by lemmydev2@infosec.pub to c/pulse_of_truth@infosec.pub

0 comments fedilink hide all child comments

11-year-old Microsoft-signed UEFI shim bootloaders, some dating back over a decade, let attackers completely bypass UEFI Secure Boot on nearly any UEFI-based machine, regardless of the installed operating system. ESET researchers uncovered that the vulnerable shims, all at version 0.9 or earlier, were signed by Microsoft’s “Microsoft Corporation UEFI CA 2011” certificate and remained trusted for […] The post 11-Year-Old Linux UEFI Shim Bootloaders Let Attackers Bypass Secure Boot appeared first on Cyber Security News.

no comments (yet)

sorted by: hot top controversial new old

there doesn't seem to be anything here