FOUND IN THE WILD: 2 SECURE BOOT EXPLOITS. MICROSOFT IS PATCHING ONLY 1 OF THEM

Summary from the TLDR InfoSec newsletter

Researchers discovered two Secure Boot bypass exploits affecting 50+ device makers. Microsoft patched CVE-2025-3052 (DT Research firmware tool vulnerability) but left CVE-2025-47827 (IGEL Linux OS flaw) unpatched. Both allow attackers with physical access to install pre-boot malware, defeating Secure Boot's core security purpose against "evil maid" attacks.