Microsoft Secure Boot broken for a decade undetected

Microsoft's Secure Boot — the firmware-level protection designed to prevent tampered software from loading at startup — has been bypassable for most of its existence due to old cryptographic "shims" the company forgot to revoke. The flaw sat unnoticed until now, meaning attackers with the right knowledge could have silently undermined one of Windows' most fundamental security guarantees on virtually any machine. Microsoft has now patched a record 570 security flaws in the same cycle.