# Microsoft’s Secure Boot has been broken for a decade and no one noticed until now

> **Newsylist Open Intelligence Dossier** · First detected: 2026-07-14 23:29 UTC · Category: Technology · Sources: 8 · Current Velocity: 6.36

## Executive Summary
Research has revealed that decade-old Microsoft-signed UEFI shims can be used to bypass Secure Boot protections.

## Intelligence Brief
ESET Research has discovered that vulnerable UEFI shims are undermining the Secure Boot process on devices. These old, Microsoft-signed applications allow attackers to bypass the security measures intended to protect the boot process.


Coverage from Ars Technica, The Hacker News, and SC Media emphasizes that 11 of these old Linux UEFI shims are specifically problematic. WeLiveSecurity and The Manila Times highlight that these forgotten shims have remained a vulnerability for a decade without being noticed.


Future developments depend on how these specific Microsoft-signed UEFI applications are addressed to prevent attackers from bypassing Secure Boot.

## Verified Facts & Key Claims
### Who discovered the vulnerability?
The vulnerability was discovered by ESET Research.

### What specifically allows the Secure Boot bypass?
Old Microsoft-signed UEFI shims, specifically 11 Linux UEFI shims, can be used to bypass the system.

### How long has this issue existed?
According to coverage from Ars Technica, the system has been broken for a decade.

## Key People, Organizations & Locations
Secure Boot, ESET Research, UEFI, Old Microsoft-signed UEFI, Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot, Forgotten UEFI

## Multi-Source Evidence Table
| Source Outlet | Headline | Published (UTC) | Verification URL |
|---|---|---|---|
| HotHardware | Forgotten Microsoft-Signed Bootloaders Let Hackers Bypass Secure Boot For 11 Years | 2026-07-14 22:20 | [Source Link](https://news.google.com/rss/articles/CBMisAFBVV95cUxPb1Z2Q2JRaTRaeFRYMnMwN1d5bW5WWk04N1hOWkZTOUpFQWFMYlgzWXNic1VhTmFxUktLcGUxeTlEVzZURFVwQUE1VDlPM3I1aWl1QXVIOWE3cWNEV0E5cmkzN01SWlZaekVLNUFuT3dESHZFZDNCWURXR2JNR1hGMnhyaHhGZ2NFdm1iLTZmUEgyUUdtU25Cc0Q0RXZyUkpCMkpYRG9HT0lkZFo2RVFIbg?oc=5) |
| Neowin | Windows 11 KB5101650, KB5094126 fixes major flaw that went unnoticed for over 10 years | 2026-07-14 22:20 | [Source Link](https://news.google.com/rss/articles/CBMitAFBVV95cUxNNzZCdHh0WjVxbmdKLUtnVGotOEdYV0tuX1pwcWwzSjNwd3REQWxsNW1kaEJLdTliYUs1M1p6dUE2UWRfcEpyUTExSFczbXB1OG1KMlJ3MEx1QnRNRlRHM252dTI5TGhPUm1CUzRmUlllNjJnZmJOOWZMWERQWHdFVDZ3NWVrTW8xQi1hTWJYOXQzUnNwREE1OUpYZHMyd0lpeGo2c3BIZzFvMWdsc0VGb3dRWUjSAbMBQVVfeXFMUG5sMnUzbEJwZzlyblEtWGFudnREU19BMzVnQWdMUVNQTWNaX0dUMzJTWnlWUnNVcWc1a25PTnpwWEFjNmJuRXk1aGxkR2ZaQ1gwZnNCNW5QNk1oWEdseWJKemthOHJoak4xdE40b2Fsdk9CR01ONHhHVTh3QXZsMXVBLUpVYXlVQTdnSHB0WDI1dEppY1dQV0t5ZklsZDB) |
| TechSpot | Microsoft finally patched Secure Boot bypasses that were hiding in plain sight since 2013 | 2026-07-14 22:20 | [Source Link](https://news.google.com/rss/articles/CBMiowFBVV95cUxNN0M5NHFfT3FuQ01ORW9RQVdZZVVBNFVXVGdFbVplNlVvQWFqX2FvbHNKbkpXRjlreDRpSzM2QW00NjBVQnFRRWtkWExzTGxiV3hBNmNHUFoyV0NKeFhkSkxhcGtlQmZEdDFvaFVxaUY5aTQ1V1JDazEwOVFqNTFWUDZvUEhOV3pQZTFUZ1h2UUxxUVhsRmhoUjVnRjdMQldoVmpJ?oc=5) |
| Ars Technica | Microsoft’s Secure Boot has been broken for a decade and no one noticed until now | 2026-07-14 22:20 | [Source Link](https://arstechnica.com/security/2026/07/microsoft-secure-boot-has-been-broken-for-most-of-its-existence/) |
| The Manila Times | ESET Research discovers vulnerable UEFI shims undermining devices’ Secure Boot | 2026-07-14 22:20 | [Source Link](https://news.google.com/rss/articles/CBMi5gFBVV95cUxPU3BScF9VdG9xQWxXTDZyRWVmTUdJZVFOYnZlOHRMVnpyRUtHTS1UejI2eXVGSktKWFNXZGM5UXdsUUxZVVVGZVNsMjQzWGtqUmpkdUZQc3VrYk1ldVRkcVJoMlpSZ0ZDa0k4bmJveHFfYUNwVHZlazRNRGItRWhwbTJKeEp0ZEx4LVRjNkJxNkNId0VLVnA4eFB5U2tLSGI4ZnAyVlZkUW5OTUJFN1RPY3IyRXp3UjNoRjZ2dVV1ZVNqUlUwNWQwRThDM3U0S2wwWGc2cG91aDFBYThpVDExQ3pCVDBtQdIB6wFBVV95cUxONGJkdzBFRmRXRmNkNjFwQ2JxdElfRGVTbGtRMVFKUHR6Mm4yTDUyWEdfcm1oZEtfc2ZnMnlGcFJkU1VTRVluMmkxMC1YTktuNm5DM2N1RGpXTjNNVTZLOUtCOElPenROb1lvU19) |
| SC Media | Old Microsoft-signed UEFI applications can bypass Secure Boot | 2026-07-14 22:20 | [Source Link](https://news.google.com/rss/articles/CBMilgFBVV95cUxPRXF6TEVERFJfSy1iVzd3X1ZBX1BGYkkyZXNCV2dIUm1wclUzNXZSVFlGRnB5bk4xTFgtM09yUzIxcG9GTmt2eVlqN0tsM29ZVkRrLXZWMVFmbU8xX0Q4WHFTdkNqTkpnckljSjdJWEs4U2dCSVV3cmNCMFZfWTEzX0NnZ3VpZGd2YU5Bcm1HRFRfcmUwc0E?oc=5) |
| The Hacker News | 11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot | 2026-07-14 22:20 | [Source Link](https://news.google.com/rss/articles/CBMifkFVX3lxTE9wVl95YzhpMTRyaWlQN0ZqZVExWWx6VnQtVmxMU2dNd0F2T19TbW1taDBFT0ZPenBseS16UnNWbFI5YVhnMWsxQ0ZkUllGbndfOGJxRmxwMEJET3A2UFZPU0Y4alFzX21jQ0NKb0VWSDJtTUhXeTlKOVFjVjBNQQ?oc=5) |
| WeLiveSecurity | Forgotten UEFI shims undermining Secure Boot | 2026-07-14 22:20 | [Source Link](https://news.google.com/rss/articles/CBMimAFBVV95cUxQa09VcDBLTG5nV005NnlJNHhiekU3S2VVMDdra0hhbG5oNUt4NU04MHdYY1MtNmpWY3l3dmVMeFh5M18yVFRRVlBmM3dkMzUzalBmYzJYVnBjZkVPc1E1enlaNFlZcEZra0tQYUR3bGdBLTBuZG41enM0VXd3MFdvaGNSalRuR2h0Um9NYnhxbW9VMmY1d0YzZA?oc=5) |
| Ars Technica | Microsoft’s Secure Boot has been broken for a decade and no one noticed until now | 2026-07-14 22:20 | [Source Link](https://news.google.com/rss/articles/CBMiqAFBVV95cUxQbDdNWDRqSzRtV1JidlFxOWU2Yi15SXU0bnB4UHMwZ1hNenBJZXlGU2VDSnBOWWpBeGl4SUpIRHpEOGVFajRWRW83UF9SSFBSeGZ2LTZwM2t2Nmk2MExadHhoNnA5UHAzQmMyTF9ZNnlBUi1tOG5ZbEJ1eWxvblJiSExJa2R4TkFaQmlpTE14Nkhnc2JSS0FHelhKRmdURm03eHl6TWw2N2w?oc=5) |

---
*Canonical Source: https://www.newsylist.com/trend/2026-07-14/microsoft-s-secure-boot-has-been-broken-for-a-decade-and-no-one-noticed-until*
*Synthesized by Newsylist Open Intelligence Engine under E-E-A-T journalistic standards.*