Found in the wild: 2 Secure Boot exploits. Microsoft is patching only 1 of them.Ars Technica · Security·Jun 10, 19:00 UTC · Jun 10, 2025VulnerabilityCVE-2025-3052CVE-2025-4782760
Windows and Linux users: The deadline to update Secure Boot keys is nearArs Technica · Security·Jun 17, 11:15 UTC · Jun 17, 2026Vulnerability155
BlackLotus is first bootkit bypassing UEFI Secure Boot on Win 11Security Affairs·Mar 1, 20:57 UTC · Mar 1, 2023VulnerabilityCVE-2022-2189460
Widely used DNA sequencer still doesn’t enforce Secure BootArs Technica · Security·Jan 7, 14:00 UTC · Jan 7, 2025Vulnerability55
Palo Alto Firewalls Found Vulnerable to Secure Boot Bypass and Firmware ExploitsThe Hacker News·Jan 24, 12:47 UTC · Jan 24, 2025VulnerabilityCVE-2020-10713CVE-2022-24030CVE-2021-33627+5 CVEs60
Flaw in some Acer laptops can be used to bypass security featuresSecurity Affairs·Nov 28, 20:10 UTC · Nov 28, 2022VulnerabilityCVE-2022-402060
New Flaw in Acer Laptops Could Let Attackers Disable Secure Boot ProtectionThe Hacker News·Nov 29, 16:39 UTC · Nov 29, 2022VulnerabilityCVE-2022-402060
April’s Patch Tuesday Brings Record Number of FixesKrebs on Security·Apr 9, 20:55 UTC · Apr 9, 2024Vulnerability in the wildCVE-2024-20670CVE-2024-29063CVE-2024-29988+2 CVEs160
Sonos Speaker Flaws Could Have Let Remote Hackers Eavesdrop on UsersThe Hacker News·Aug 10, 07:14 UTC · Aug 10, 2024VulnerabilityCVE-2023-50809CVE-2023-50810CVE-2024-2001860
Critical U-Boot Bugs Undermine Secure Boot on Millions of DevicesSecurity Affairs·Jul 11, 17:45 UTC · Jul 11, 2026VulnerabilityCVE-2020-10648CVE-2021-2709760
Microsoft Patch TuesdayCisco Talos·Jul 12, 23:43 UTC · Jul 12, 2016VulnerabilityCVE-2016-3204CVE-2016-3238CVE-2016-3239+7 CVEs60
Microsoft Patches 67 Vulnerabilities Including WEBDAV ZeroThe Hacker News·Jun 12, 15:47 UTC · Jun 12, 2025Vulnerability in the wildCVE-2025-33053CVE-2025-47966CVE-2025-32713+3 CVEs160
Patch Tuesday, January 2026 EditionKrebs on Security·Jan 15, 00:00 UTC · Jan 15, 2026Vulnerability in the wildCVE-2026-20805CVE-2026-20952CVE-2026-20953+6 CVEs160
Week in review: High severity WordPress vulnerabilities, fake OAuth IDs bypass sign-in logsHelp Net Security·Jul 19, 00:00 UTC · Jul 19, 2026Vulnerability in the wildCVE-2026-15409CVE-2026-15410CVE-2026-56155+2 CVEs60
Microsoft fixes two actively exploited bugs, one used by BlackLotus bootkit (CVE-2023-29336, CVE-2023-24932)Help Net Security·May 9, 00:00 UTC · May 9, 2023Vulnerability in the wildCVE-2023-29336CVE-2023-24932CVE-2022-21882+10 CVEs160
Thrangrycat flaw could allow compromising millions of Cisco devicesSecurity Affairs·May 17, 14:11 UTC · May 17, 2019VulnerabilityCVE-2019-1649CVE-2019-186260
Microsoft's May Patch Tuesday Fixes 38 Flaws, Including 2 Exploited ZeroThe Hacker News·May 15, 00:00 UTC · May 15, 2023Vulnerability in the wildCVE-2023-29336CVE-2023-29325CVE-2023-24932+1 CVEs60
BlackLotus UEFI bootkit disables Windows security mechanismsHelp Net Security·Apr 17, 10:14 UTC · Apr 17, 2023Vulnerability in the wildCVE-2022-2189460
Microsoft Fixes 149 Flaws in Huge April Patch Release, ZeroThe Hacker News·Apr 11, 11:08 UTC · Apr 11, 2024Vulnerability in the wildCVE-2024-26234CVE-2024-29988CVE-2024-21412+2 CVEs60
Microsoft Patch TuesdayCisco Talos·Aug 9, 19:15 UTC · Aug 9, 2016VulnerabilityCVE-2016-3301CVE-2016-3303CVE-2016-3304+11 CVEs60
Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively ExploitedThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2026Vulnerability in the wildCVE-2025-65046CVE-2026-0628CVE-2026-20805+5 CVEs160
Rambus CryptoManager Root of Trust expansion to address the security needs of applicationsHelp Net Security·Jun 28, 00:00 UTC · Jun 28, 2019Vulnerability55
Microsoft Patch Tuesday, May 2023 EditionKrebs on Security·May 10, 07:06 UTC · May 10, 2023Vulnerability in the wildCVE-2023-29336CVE-2023-24932CVE-2023-24941+2 CVEs60
Microsoft Patch Tuesday for May 2023 fixed 2 zeroSecurity Affairs·May 10, 05:25 UTC · May 10, 2023Vulnerability in the wildCVE-2023-29336CVE-2023-24932CVE-2023-24941+2 CVEs60
Microsoft Patches 59 Vulnerabilities Including Six Actively Exploited ZeroThe Hacker News·Feb 11, 14:55 UTC · Feb 11, 2026Vulnerability in the wildCVE-2026-0391CVE-2026-21510CVE-2026-21513+5 CVEs60
Dell's intrinsic security helps customers lower risk and become more cyber resilientHelp Net Security·Dec 7, 00:00 UTC · Dec 7, 2020Vulnerability55
Microsoft Patches Three ZeroInfosecurity Magazine·May 10, 09:30 UTC · May 10, 2023Vulnerability in the wildCVE-2023-29336CVE-2023-24932CVE-2023-2932560
CERT CC warns about critical flaws in UEFI implementationsSecurity Affairs·Jan 7, 12:13 UTC · Jan 7, 2015VulnerabilityCVE-2014-8274CVE-2014-8273CVE-2014-827160
Microsoft Patch TuesdayCisco Talos·Nov 8, 22:09 UTC · Nov 8, 2016VulnerabilityCVE-2016-7212CVE-2016-7248CVE-2016-7205+8 CVEs60
Critical Boot Loader Vulnerability in Shim Impacts Nearly All Linux DistrosThe Hacker News·Feb 8, 03:11 UTC · Feb 8, 2024VulnerabilityCVE-2023-40547CVE-2023-40546CVE-2023-40548+3 CVEs60
Microsoft Patches 138 Vulnerabilities, Including DNS and Netlogon RCE FlawsThe Hacker News·May 15, 00:00 UTC · May 15, 2026Vulnerability in the wildCVE-2025-54518CVE-2026-41096CVE-2026-42826+14 CVEs160
Microsoft Patch Tuesday security updates for January 2026 fixed actively exploited zeroSecurity Affairs·Jan 14, 08:43 UTC · Jan 14, 2026Vulnerability in the wildCVE-2026-20805CVE-2023-31096CVE-2026-21265+1 CVEs60
Microsoft debuts hardware-rooted security for foiling firmware attacksHelp Net Security·Oct 22, 00:00 UTC · Oct 22, 2019Vulnerability55
Linux Devs Rush to Patch Critical Vulnerability in ShimInfosecurity Magazine·Feb 8, 16:30 UTC · Feb 8, 2024VulnerabilityCVE-2023-4054760
Wind River acquires Star Lab to broaden portfolio with cyber and anti-tamper security software for LinuxHelp Net Security·Jan 16, 00:00 UTC · Jan 16, 2020Vulnerability55
April’s Patch Tuesday includes 150 vulnerabilities, 60 which could lead to remote code executionCisco Talos·Apr 10, 12:15 UTC · Apr 10, 2024VulnerabilityCVE-2024-21322CVE-2024-21323CVE-2024-29053+3 CVEs60
Microsoft Patch Tuesday — Nov. 2019: Vulnerability disclosures and Snort coverageCisco Talos·Nov 12, 19:58 UTC · Nov 12, 2019VulnerabilityCVE-2019-1448CVE-2019-0721CVE-2019-1389+70 CVEs60
Microsoft Patch Tuesday security updates for August 2024 six actively exploited bugsSecurity Affairs·Aug 14, 07:17 UTC · Aug 14, 2024Vulnerability in the wildCVE-2024-38189CVE-2024-38178CVE-2024-38193+12 CVEs260
Week in review: Exploited newly patched BeyondTrust RCE, United Airlines CISO on building resilienceHelp Net Security·Feb 15, 00:00 UTC · Feb 15, 2026Vulnerability in the wildCVE-2026-1731CVE-2024-12356CVE-2026-1281+2 CVEs60
Week in review: New Intel CPU vulnerabilities, SharePoint servers under attackHelp Net Security·May 19, 00:00 UTC · May 19, 2019VulnerabilityCVE-2019-0708CVE-2019-060460