UEFI shims undermining Secure Boot

ESET researchers discovered 11 old, Microsoft-signed, UEFI applications that allow bypassing UEFI Secure Boot on the majority of UEFI-based systems, enabling deployment of malicious UEFI bootkits or other malware.