Microsoft Neglects Secure Boot Revocations Leaving Devices Vulnerable for Years

By Dan Goodin · Ars Technica · 2026-07-14

According to reporting from Ars Technica, a fundamental security flaw in the Secure Boot ecosystem has left Windows and Linux machines exposed to firmware attacks for over a decade. Researchers from ESET discovered that Microsoft failed to revoke digital signatures for at least 1

According to reporting from Ars Technica, a fundamental security flaw in the Secure Boot ecosystem has left Windows and Linux machines exposed to firmware attacks for over a decade. Researchers from ESET discovered that Microsoft failed to revoke digital signatures for at least 1