Secure Boot Vulnerabilities Unveiled

More than 200 device models from major manufacturers like Acer, Dell, and Intel have compromised Secure Boot due to a leak of cryptographic keys in 2022. Researchers revealed that these keys, which are essential for determining which signatures are trustworthy, were mistakenly published in a public GitHub repository. As a result, attackers could potentially sign malicious binaries, which the affected devices would load, thereby undermining their security. The existence of keys labeled 'do not trust' in production firmware highlights serious lapses in security practices among these manufacturers.