[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNWO52IDAOCfYOSiCapX4KbRXj1-DiNz2n9jmKyfsVIM":3},{"article":4,"iocs":40,"watch_terms":41,"solutions":42,"lesson":113},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":22,"category":23,"article_tags":27},"4f28c64c-ab05-4bbe-bfa1-95e2fcfdf506","Forgotten Bootloaders Expose Secure Boot Blind Spot","forgotten-bootloaders-expose-secure-boot-blind-spot-43956f","Nearly a dozen vulnerable and now revoked UEFI shim bootloaders remained trusted for years, giving attackers a path to bypass Secure Boot.","Researchers discovered that nearly a dozen UEFI shim bootloaders, which are crucial for the Secure Boot process, were vulnerable and remained trusted for years. These vulnerabilities allowed attackers to bypass Secure Boot, a critical security feature designed to prevent malicious software from loading during the boot process. The affected bootloaders have since been revoked.","Vulnerable UEFI shim bootloaders bypassed Secure Boot for years.","https:\u002F\u002Fwww.darkreading.com\u002Fcyber-risk\u002Fforgotten-bootloaders-expose-secure-boot-blind-spot","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt0aa2d53ba98348f4\u002F6a57ee26ba47bfb6d5ec84a6\u002Fboot_ChristianChan_shutterstock.jpg?width=720&quality=80&disable=upscale","2026-07-15T21:19:19+00:00","2026-07-15T22:00:16.964629+00:00",8,[17,20],{"name":18,"type":19},"UEFI shim bootloaders","technology",{"name":21,"type":19},"Secure Boot","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":22,"icon":24,"name":25,"slug":26},null,"Vulnerabilities","vulnerabilities",[28,33,35],{"category":29},{"id":30,"icon":24,"name":31,"slug":32},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":34},{"id":22,"icon":24,"name":25,"slug":26},{"category":36},{"id":37,"icon":24,"name":38,"slug":39},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[],{"controls":43,"vendors":112},[44,73,98],{"slug":45,"name":46,"problem":47,"products":48},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[49,57,65],{"vendor_slug":50,"vendor_name":51,"vendor_logo":52,"product_slug":53,"product_name":54,"url":55,"description":56},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":61,"product_name":62,"url":63,"description":64},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":74,"name":75,"problem":76,"products":77},"patch-management","Automated patch management","Known holes get closed in days, not months.",[78,86,90],{"vendor_slug":79,"vendor_name":80,"vendor_logo":81,"product_slug":82,"product_name":83,"url":84,"description":85},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":74,"product_name":87,"url":88,"description":89},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":99,"name":100,"problem":101,"products":102},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",[103,104],{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",[],{"slug":114,"title":115,"body":116,"framework_refs":117,"framework_notes":127},"forgotten-uefi-bootloaders-leave-secure-boot-exposed-for-years","Forgotten UEFI Bootloaders Leave Secure Boot Exposed for Years","Nearly a dozen UEFI shim bootloaders remained trusted and in active use despite containing exploitable vulnerabilities that allowed attackers to completely bypass Secure Boot — a foundational control designed to ensure only trusted code executes at system startup. The core failure was a lack of ongoing lifecycle management for low-level firmware and boot components, which are frequently overlooked in standard vulnerability management programs. Because these bootloaders were never revoked in a timely manner, attackers with physical or privileged access could exploit them to load malicious code before the operating system even starts, nullifying many downstream security controls. This case highlights that security hygiene must extend beyond applications and operating systems to include firmware, bootloaders, and other pre-OS components that are often invisible to traditional scanning tools.",[118,119,120,121,122,123,124,125,126],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 7: Continuous Vulnerability Management","NIST SP 800-147: BIOS Protection Guidelines","NIST SP 800-155: BIOS Integrity Measurement Guidelines","NIST CSF ID.AM-2: Software platforms and applications are inventoried","NIST SI-2: Flaw Remediation","NIST SI-7: Software, Firmware, and Information Integrity","ITIL: Change and Release Management","UEFI Forum Secure Boot Revocation (dbx) Best Practices",{}]