Turns out Microsoft's Secure Boot was little better than a busted lock for about a decade
Microsoft's Secure Boot system has been vulnerable for approximately a decade, allowing malicious code to execute during boot and persist even after OS reinstallation or drive swaps. ESET researchers identified 11 vulnerable UEFI shim bootloaders, which Microsoft has now revoked permissions for. This oversight allowed for potential firmware exploits on both Linux and Windows devices.
PC Gamer
Original source
This article was reported and published by PC Gamer. feed.gg links to it as part of a story cluster — full text, images and rights remain with the publisher.