The PKfail vulnerability in UEFI allows attackers to bypass Secure Boot by using hard-coded Platform Keys (PKs) that should only be used for testing. These untrusted keys can be inadvertently included in production firmware, leaving systems vulnerable to malicious modules that can execute with high privileges during boot. UEFI's key verification process is limited, allowing untrusted keys to be mistaken for trusted keys. The lack of stringent verification and attribute-based validation enables these keys to bypass security measures. UEFI firmware is often invisible to EDR software, making it difficult to detect compromised keys. Additionally, many UEFI implementations lack remote measurement or auditing capabilities. An attacker with access to a compromised PK's private portion can sign malicious UEFI software, leading to the invalidation of security features, installation of persistent software, creation of backdoors, and system damage. To mitigate this vulnerability, it is crucial to update UEFI firmware to the latest stable version provided by the vendor or reseller. Tools and information from Binarly can be used to assess the impact of untrusted Platform Keys on systems. Automatic firmware updates should be utilized to keep firmware up to date and mitigate risks.