Microsoft's Secure Boot, an industry-wide standard designed to protect Windows and Linux devices from firmware infections, has been compromised for over a decade. This revelation, made by researchers at ESET, highlights a critical vulnerability in the system that Microsoft overlooked. The issue stems from the presence of 'shims' - secondary trust anchors signed by Microsoft - that were not revoked despite known vulnerabilities. These shims, used to extend Secure Boot to Linux devices and utility software, can be exploited by novice hackers to bypass the protection mechanism. The threat is significant, as it allows attackers to install malicious firmware that persists after OS reinstallation or hard drive replacement. The complexity of Secure Boot's revocation process, which relies on SBAT and Secure Boot SVN, has contributed to the lapse in security. This debacle raises questions about the effectiveness of Secure Boot and the need for a reboot in the secure boot model. The incident serves as a stark reminder of the importance of vigilance in cybersecurity and the need for continuous improvement in security measures.
