Plug and Pwn attack abuses Windows Plug and Play for SYSTEM access
Source headline: Plug and Pwn attack uses fake USB devices for Windows SYSTEM access
Intelligence Summary
Researchers disclosed a “Plug and Pwn” technique that abuses Windows Plug and Play. The method uses fake USB devices to influence what Windows installs. It can cause Windows to install vulnerable or insecure vendor software. This can lead to SYSTEM-level access on affected systems. Users should review USB device handling and apply vendor and Windows security updates as available.
Recommended Action
Confirm whether the affected technology is in use in your environment before deciding on remediation. Until then, watch authentication and outbound traffic logs for the indicators described in the source. This signal rests on a single report, so corroborate it before acting on anything irreversible.