CISA Issues Guidance on UEFI Secure Boot Management to Combat Bootkit Threats

First seen 15 Dec 2025, 04:46 UTC • Gbhackers

•31

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

In December 2025, CISA, in collaboration with the NSA, released guidance for enterprises on managing UEFI Secure Boot configurations to mitigate bootkit threats. The guidance addresses vulnerabilities such as PKFail, BlackLotus, and BootHole that can bypass security measures. Organizations are urged to verify their configurations to enhance security against these threats.

Ask AI about this cluster

Answers cite the sources they use

How this analysis works

Attack Flow

Continue Reading

FishMonger Expands SprySOCKS Malware to Windows with Kernel-Level Stealth Critical UEFI Secure Boot Bypass Vulnerability Discovered Secure Boot Certificate Expiration Threatens Windows Security Posture Old UEFI Shims Exploit Bypass of Secure Boot Security Cybercrime Alliance Formed: Scattered Spider, LAPSUS$, and ShinyHunters Unite Data Breach Affects Over 200 Companies via Gainsight Integration with Salesforce

CISA Issues Guidance on UEFI Secure Boot Management to Combat Bootkit Threats

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading