Researchers have unearthed two publicly available exploits that completely evade protections offered by Secure Boot, the industry wide mechanism for ensuring devices load only secure operating system images during the boot up process. Microsoft is taking action to block one exploit and allowing the other one to remain a viable threat. As part of Tuesday monthly security update routine, Microsoft patched CVE 2025 3052, a Secure Boot bypass vulnerability affecting more than 50 device makers. More...

Read the full article at Arstechnica