Cybersecurity

Researchers demonstrated how attackers can bypass its protections without physically tampering with the device. The exploit, known as “bitpixie” (CVE-2023-21563), was showcased at the Chaos Communication Congress (38C3) by security researcher Thomas Lambertz.

The “bitpixie” exploit bypasses Secure Boot by exploiting a downgrade attack on the Windows Boot Manager.

Note this post evaluates Linux systems. Microsoft presumably has a different, hopefully better, implementation.

Sharing a website for those who are interested in red teaming and hacking. Could be some useful techniques added to your own penetration testing.

On Portswigger's website: Nominations are now open for the top 10 new web hacking techniques of 2024!