SECURITYAug 11 · 10:48 UTCTHE HACKER NEWS[email protected] (The Hacker News)

Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11

Researchers discovered a vulnerability where Windows Plug and Play can be abused to execute privileged installation components on fully updated Windows 11 machines, leading to SYSTEM access. This exploit path can also be triggered remotely over Remote Desktop if supported Plug and Play or low-level USB redirection is active.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned

Windows 11topicPlug and Playtopicsystem accesstopicRemote DesktoptopicMicrosoftorganization

Spot something wrong with this article?Report a problem →

Forward this

Related Signal

Adjacent reporting

SECURITYMay 17 · 22:30 UTC
New Windows 'MiniPlasma' zero-day exploit gives SYSTEM access, PoC released
SECURITYApr 21 · 19:12 UTC
Exploits Turn Windows Defender into Attacker Tool
SECURITYApr 17 · 17:48 UTC
Hackers are abusing unpatched Windows security flaws to hack into organizations
SECURITYApr 16 · 20:19 UTC
New Microsoft Defender “RedSun” zero-day PoC grants SYSTEM privileges
SECURITYJun 19 · 08:48 UTC
Microsoft found malware that hijacks crypto wallets and spreads through USB sticks