search
UEFI Secure Boot
Trends
- 1EDKII vulnerability found to bypass UEFI Secure Boot in PXE Boot▼EDKII CVE enables UEFI Secure Boot bypass in almost every use case of PXE Boot
A newly disclosed vulnerability in EDKII, the open-source implementation of UEFI used widely across PC firmware, allows attackers to bypass UEFI Secure Boot in nearly every scenario where network-based PXE Boot is used to start a machine. The flaw, catalogued as CVE-2026-97631 and listed in the US National Vulnerability Database, is drawing attention from security researchers and system administrators concerned that network boot deployments may silently defeat Secure Boot protections.
- 2UEFI bootkit infected fully patched Windows machines●# UEFI # bootkit infected fully patched # Windows machines. Is # Microsoft to blame? https:// arstechnica.com/security/2
A UEFI bootkit managed to compromise fully patched Windows machines, raising questions about whether Microsoft is to blame for the vulnerability. Reporting by Ars Technica connects the incident to BlackLotus, a known bootkit that exploits weaknesses in the UEFI secure boot process. Security commentators are debating whether the fault lies with Microsoft's firmware signing and patching practices, and what users can do to protect systems against boot-level malware that survives reinstalls.