Found in the wild: 2 Secure Boot exploits. Microsoft is patching only 1 of them.Ars Technica · Security·Jun 10, 19:00 UTC · Jun 10, 2025VulnerabilityCVE-2025-3052CVE-2025-4782760
Windows and Linux users: The deadline to update Secure Boot keys is nearArs Technica · Security·Jun 17, 11:15 UTC · Jun 17, 2026Vulnerability155
Windows Security app gets Secure Boot certificate status indicators as 2026 expiration approachesHelp Net Security·Jun 19, 12:16 UTC · Jun 19, 2026Industry155
BlackLotus is first bootkit bypassing UEFI Secure Boot on Win 11Security Affairs·Mar 1, 20:57 UTC · Mar 1, 2023VulnerabilityCVE-2022-2189460
Just about every Windows and Linux device vulnerable to new LogoFAIL firmware attackArs Technica · Security·Dec 6, 15:02 UTC · Dec 6, 2023Exploit / PoC60
Widely used DNA sequencer still doesn’t enforce Secure BootArs Technica · Security·Jan 7, 14:00 UTC · Jan 7, 2025Vulnerability55
BlackLotus Becomes First UEFI Bootkit Malware to Bypass Secure Boot on Windows 11The Hacker News·Jun 23, 08:42 UTC · Jun 23, 2023Malware in the wildCVE-2022-21894160
Palo Alto Firewalls Found Vulnerable to Secure Boot Bypass and Firmware ExploitsThe Hacker News·Jan 24, 12:47 UTC · Jan 24, 2025VulnerabilityCVE-2020-10713CVE-2022-24030CVE-2021-33627+5 CVEs60
Flaw in some Acer laptops can be used to bypass security featuresSecurity Affairs·Nov 28, 20:10 UTC · Nov 28, 2022VulnerabilityCVE-2022-402060
⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and MoreThe Hacker News·Jun 29, 14:42 UTC · Jun 29, 2026Malware in the wildCVE-2026-43503CVE-2026-12569CVE-2026-47729+19 CVEs60
New Flaw in Acer Laptops Could Let Attackers Disable Secure Boot ProtectionThe Hacker News·Nov 29, 16:39 UTC · Nov 29, 2022VulnerabilityCVE-2022-402060
April’s Patch Tuesday Brings Record Number of FixesKrebs on Security·Apr 9, 20:55 UTC · Apr 9, 2024Vulnerability in the wildCVE-2024-20670CVE-2024-29063CVE-2024-29988+2 CVEs160
Sonos Speaker Flaws Could Have Let Remote Hackers Eavesdrop on UsersThe Hacker News·Aug 10, 07:14 UTC · Aug 10, 2024VulnerabilityCVE-2023-50809CVE-2023-50810CVE-2024-2001860
Critical U-Boot Bugs Undermine Secure Boot on Millions of DevicesSecurity Affairs·Jul 11, 17:45 UTC · Jul 11, 2026VulnerabilityCVE-2020-10648CVE-2021-2709760
Microsoft Patch TuesdayCisco Talos·Jul 12, 23:43 UTC · Jul 12, 2016VulnerabilityCVE-2016-3204CVE-2016-3238CVE-2016-3239+7 CVEs60
Sectigo helps OEMs and enterprises secure their connected devices and productsHelp Net Security·Dec 18, 00:00 UTC · Dec 18, 2020Data breach60
Microsoft Patches 67 Vulnerabilities Including WEBDAV ZeroThe Hacker News·Jun 12, 15:47 UTC · Jun 12, 2025Vulnerability in the wildCVE-2025-33053CVE-2025-47966CVE-2025-32713+3 CVEs160
Critical GRUB2 Bootloader Bug Affects Billions of Linux and Windows SystemsThe Hacker News·Jul 29, 19:50 UTC · Jul 29, 2020MalwareCVE-2020-1071360
Patch Tuesday, January 2026 EditionKrebs on Security·Jan 15, 00:00 UTC · Jan 15, 2026Vulnerability in the wildCVE-2026-20805CVE-2026-20952CVE-2026-20953+6 CVEs160
Week in review: High severity WordPress vulnerabilities, fake OAuth IDs bypass sign-in logsHelp Net Security·Jul 19, 00:00 UTC · Jul 19, 2026Vulnerability in the wildCVE-2026-15409CVE-2026-15410CVE-2026-56155+2 CVEs60
Microsoft fixes two actively exploited bugs, one used by BlackLotus bootkit (CVE-2023-29336, CVE-2023-24932)Help Net Security·May 9, 00:00 UTC · May 9, 2023Vulnerability in the wildCVE-2023-29336CVE-2023-24932CVE-2022-21882+10 CVEs160
ArcaneDoor Threat Actor Resurfaces in Continued Attacks Against CiscoInfosecurity Magazine·Sep 26, 12:00 UTC · Sep 26, 2025Threat actorCVE-2025-20333CVE-2025-2036260
Thrangrycat flaw could allow compromising millions of Cisco devicesSecurity Affairs·May 17, 14:11 UTC · May 17, 2019VulnerabilityCVE-2019-1649CVE-2019-186260
Microsoft's May Patch Tuesday Fixes 38 Flaws, Including 2 Exploited ZeroThe Hacker News·May 15, 00:00 UTC · May 15, 2023Vulnerability in the wildCVE-2023-29336CVE-2023-29325CVE-2023-24932+1 CVEs60
BlackLotus UEFI bootkit disables Windows security mechanismsHelp Net Security·Apr 17, 10:14 UTC · Apr 17, 2023Vulnerability in the wildCVE-2022-2189460
Microsoft Fixes 149 Flaws in Huge April Patch Release, ZeroThe Hacker News·Apr 11, 11:08 UTC · Apr 11, 2024Vulnerability in the wildCVE-2024-26234CVE-2024-29988CVE-2024-21412+2 CVEs60
IGEL OS Workspace Edition version 11.03 offers advanced security features and signed OS partitionsHelp Net Security·Dec 13, 00:00 UTC · Dec 13, 2019Malware55
Microsoft Patch TuesdayCisco Talos·Aug 9, 19:15 UTC · Aug 9, 2016VulnerabilityCVE-2016-3301CVE-2016-3303CVE-2016-3304+11 CVEs60
Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively ExploitedThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2026Vulnerability in the wildCVE-2025-65046CVE-2026-0628CVE-2026-20805+5 CVEs160
Cypress PSoC 64 Standard Secure AWS MCU helps designers reduce risk and costs, drive time-to-marketHelp Net Security·Apr 20, 09:45 UTC · Apr 20, 2026Industry55
Rambus CryptoManager Root of Trust expansion to address the security needs of applicationsHelp Net Security·Jun 28, 00:00 UTC · Jun 28, 2019Vulnerability55
Microsoft Patch Tuesday, May 2023 EditionKrebs on Security·May 10, 07:06 UTC · May 10, 2023Vulnerability in the wildCVE-2023-29336CVE-2023-24932CVE-2023-24941+2 CVEs60
Microsoft patches two actively exploited zero-days (CVE-2024-29988, CVE-2024-26234)Help Net Security·Apr 9, 00:00 UTC · Apr 9, 2024Exploit / PoC in the wildCVE-2024-29988CVE-2024-26234CVE-2024-21412+9 CVEs60
Critical shim bug impacts every Linux boot loader signed in the past decadeSecurity Affairs·Feb 7, 14:46 UTC · Feb 7, 2024MalwareCVE-2023-40547CVE-2023-40546CVE-2023-40548+3 CVEs60
Microsoft Releases RecordSecurity Affairs·Jun 9, 22:56 UTC · Jun 9, 2026Exploit / PoC in the wildCVE-2026-41091CVE-2026-45657CVE-2026-47291+5 CVEs160
Microsoft Patch Tuesday for May 2023 fixed 2 zeroSecurity Affairs·May 10, 05:25 UTC · May 10, 2023Vulnerability in the wildCVE-2023-29336CVE-2023-24932CVE-2023-24941+2 CVEs60
Mitsubishi Electric develops cyber defense technology for connected carsHelp Net Security·Jan 23, 00:00 UTC · Jan 23, 2019Industry55
Microsoft Patches 59 Vulnerabilities Including Six Actively Exploited ZeroThe Hacker News·Feb 11, 14:55 UTC · Feb 11, 2026Vulnerability in the wildCVE-2026-0391CVE-2026-21510CVE-2026-21513+5 CVEs60
Dell's intrinsic security helps customers lower risk and become more cyber resilientHelp Net Security·Dec 7, 00:00 UTC · Dec 7, 2020Vulnerability55