Firmware Security

Forgotten Shims: How 11 Old Microsoft-Signed Files Break Secure Boot

ESET Research found 11 old UEFI shim bootloaders, all validly signed by Microsoft, that bypass Secure Boot on any system trusting Microsoft's third-party CA. CVE-2026-8863 and CVE-2026-10797 — no exploit chain required.

Your Headphones Have Firmware: FOTA Is the IoT Attack Surface Nobody Patches

Bluetooth earbuds, speakers, and IoT devices now ship with firmware update paths, microphones, pairing protocols, and cloud-adjacent features. That does not make every headset a network foothold, but it does make the accessory worth threat-modeling.

Pwnd Blaster: How a $280 Soundbar Becomes a Wireless BadUSB

A Bluetooth flaw in Creative's Sound Blaster Katana V2X lets anyone within 15 meters flash malicious firmware and turn the soundbar into a keystroke-injecting keyboard — no pairing required.

UEFI Bootkits: The Malware That Lives Below Your Operating System

UEFI bootkits survive OS reinstalls, hide from every AV and EDR tool, and can bypass Secure Boot on fully-patched systems. Here's how they work and what you can do about it.