Undetectable Security Flaw Found in USBs -- Security Today

Undetectable Security Flaw Found in USBs

By Ginger Hill
Jul 31, 2014

Undetectable Security Flaw Found in USBs The humble USB that interconnects our digital lives may not be as safe as we think. New research reveals a fundamental security flaw in the way this little data-saving jewel functions, and it could wreak havoc on computer systems.

Security researchers, Karsten Nohl and Jakob Lell, have reverse engineered the firmware that controls the basic functions of USBs, discovering an embedded controller chip that allows the device and connected computer to send information back and forth. This malware does not sit in flash memory, but is instead, hidden in the firmware.

It’s virtually impossible to check if a device’s firmware has been tampered with, besides, the malware can travel both ways, via a USB to infect a computer and then the PC can infect other USBs plugged into it.

So, what can be done about this? Very little, actually, as there’s no patch code that can be used. The only viable action at this time is to not plug a USB device into any computer that you don’t trust and don’t plug untrusted USBs into computers.

About the Author

Ginger Hill is Group Social Media Manager.

Featured

Strengthening Healthcare Security with Sentri-Zone

With over half of physicians feeling unprotected at work, Sentri-Zone offers a proactive shield against the rising tide of healthcare violence. Read Now
- Hospital
- Facility Security
- Physical Security
Executive Protection in a Noisy World: Why Speed and Defensibility Matter

CSOs are not short on data; they are short on time and trust. This is particularly true when it comes to Executive Protection (EP) in a high-velocity threat environment, where an online post can escalate into a real-world incident within minutes. Read Now
FBI Warns of Potential Iranian Drone Threat to California Coast

Federal intelligence suggests sea-based unmanned aerial vehicle strikes are being considered as retaliation for the ongoing Middle East conflict. Read Now
- Homeland Security
- Government
- Incident Response
How Agentic AI Will Shape the Autonomous SOC at Scale at ISC West 2026

SOCs, a relatively new phenomenon in the field of security, have seen steady, incremental improvements since their inception in the 90s. Fast forward to today, and the architecture of threat detection and response has dramatically outpaced the teams responsible for its oversight. Read Now
March Patch Tuesday Minimal Risks Highlight Shadow AI Threats

Security leaders urged to prioritize internal AI audits over low-impact vulnerabilities as Microsoft releases a quiet monthly update. Read Now

Security Today eNews

Sign up today for essential industry news and product information that can help you stay afloat in the fast-paced world of security.

Email Address*Country*

Please type the letters/numbers you see above.

Webinars

Whitepapers

New Products

Camden CV-7600 High Security Card Readers

Camden Door Controls has relaunched its CV-7600 card readers in response to growing market demand for a more secure alternative to standard proximity credentials that can be easily cloned. CV-7600 readers support MIFARE DESFire EV1 & EV2 encryption technology credentials, making them virtually clone-proof and highly secure.
EasyGate SPT SPD

Security solutions do not have to be ordinary, let alone unattractive. Having renewed their best-selling speed gates, Cominfo has once again demonstrated their Art of Security philosophy in practice — and confirmed their position as an industry-leading manufacturers of premium speed gates and turnstiles.
HD2055 Modular Barricade

Delta Scientific’s electric HD2055 modular shallow foundation barricade is tested to ASTM M50/P1 with negative penetration from the vehicle upon impact. With a shallow foundation of only 24 inches, the HD2055 can be installed without worrying about buried power lines and other below grade obstructions. The modular make-up of the barrier also allows you to cover wider roadways by adding additional modules to the system. The HD2055 boasts an Emergency Fast Operation of 1.5 seconds giving the guard ample time to deploy under a high threat situation.