Secure Boot405 Forgotten UEFI Shims Undermining Secure Boot
ESET research reveals 11 old, Microsoft-signed UEFI shim bootloaders (versions 0.9 and below) that can bypass UEFI Secure Boot on any UEFI…
oxfemale·
Jul 14·
15 min
·405
// Secure Boot
4 postsSecure Boot405 
Embedded203 (CVE-2026-0714) TPM-sniffing LUKS Keys on an Embedded Device
Researchers discovered CVE-2026-0714 where a Moxa embedded device leaks its LUKS disk key in plaintext over the TPM SPI bus during boot.…
oxfemale·
Mar 22·
13 min
·203
Apple Silicon341 Booting into Trust: Reverse Engineering macOS Secure Boot Internals
The article analyzes the macOS secure boot chain on Apple Silicon, showing how Boot ROM, cryptographic verification, Secure Enclave, and staged bootloaders…
oxfemale·
Mar 20·
196 min
·341
BitLocker103 Windows Local Privilege Escalation through the bitpixie Vulnerability
The article explains the Bitpixie vulnerability in Windows Boot Manager that allows attackers to bypass BitLocker encryption. By abusing a PXE soft…
oxfemale·
Mar 5·
22 min
·103