Windows Plug and Play can be abused to fetch signed vendor software for an emulated USB device and execute privileged installation components that researchers chained to SYSTEM access on a fully updated Windows 11 machine. The same PnP path can be triggered over Remote Desktop without physical hardware when supported Plug and Play or low-level USB redirection is enabled;…
Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11
Summary + source link. No paywalls, no tracking.