AI and Tech Summaries - AI Weekly Malaysia

Summaries

Short AI and tech summaries with source links, signal scores, and why each update matters for builders, founders, and Malaysian tech workers.

Window

Today Yesterday This week Last week This month Last month All time

Showing 1-1 of 1 results

Date	Provider	Score	Summary
11 Aug 2026, 6:48 PM	The Hacker News	4.5	Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11 Researchers Alejandro Hernando and Borja Martinez demonstrated at DEF CON 34 that Windows 11's Plug and Play auto-install can be chained into full SYSTEM execution on a fully updated machine. The physical path emulates a Sierra Wireless device to install SwiService.exe, abuses its SetDNS primitive, then emulates a Sony FeliCa reader whose co-installer fetches config over plaintext HTTP with a path-traversal flaw to plant a DLL in System32. A remote variant forges synthetic USB traffic over RDP using a phantom Intel RealSense device and a CRYPTBASE.dll search-order hijack, though Microsoft notes RDP USB redirection is not enabled by default. Why: If your team runs Windows 11 endpoints with RDP USB redirection enabled or allows untrusted USB devices on managed machines, this chain gives an unprivileged user or authenticated RDP user a path to SYSTEM. The practical action is to verify that low-level USB redirection over RDP is disabled (Microsoft says it is off by default) and restrict physical USB device installation on shared or kiosk-style Windows machines. windows-security privilege-escalation def-con usb rdp

Date

Provider

Score

Summary

11 Aug 2026, 6:48 PM

The Hacker News

4.5

Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11

Researchers Alejandro Hernando and Borja Martinez demonstrated at DEF CON 34 that Windows 11's Plug and Play auto-install can be chained into full SYSTEM execution on a fully updated machine. The physical path emulates a Sierra Wireless device to install SwiService.exe, abuses its SetDNS primitive, then emulates a Sony FeliCa reader whose co-installer fetches config over plaintext HTTP with a path-traversal flaw to plant a DLL in System32. A remote variant forges synthetic USB traffic over RDP using a phantom Intel RealSense device and a CRYPTBASE.dll search-order hijack, though Microsoft notes RDP USB redirection is not enabled by default.

Why: If your team runs Windows 11 endpoints with RDP USB redirection enabled or allows untrusted USB devices on managed machines, this chain gives an unprivileged user or authenticated RDP user a path to SYSTEM. The practical action is to verify that low-level USB redirection over RDP is disabled (Microsoft says it is off by default) and restrict physical USB device installation on shared or kiosk-style Windows machines.