News for hackers. Stuff that matters.

A comment on Incident Report: CVE-2024-YIKES. Parent comment

Re:Incident Report: CVE-2024-YIKES by shakna on Sunday May 10, 2026 @10:34PM (#48090457)
A USB that was both storage and a keyboard, that executed the keystrokes to download malware, was demo'd at a DefCon a few years back.
[ Parent | on HN ]
Re:Incident Report: CVE-2024-YIKES by menno-sh on Monday May 11, 2026 @01:14PM (#48097754)
Even worse than a rubber ducky: the O.MG cable does the same thing, but looks like a regular USB cable. Their Apple Lightning-dupe [0] is my favorite. The creator was on Darknet Diaries a while ago, too. [1]

[0] https://shop.hak5.org/products/omg-cable [1] https://darknetdiaries.com/episode/161/

[ Parent | on HN ]
Re:Incident Report: CVE-2024-YIKES by crumpled on Monday May 11, 2026 @01:21PM (#48097839)
BadUSB, Blackhat 2014.

That's almost 12 years now. A novice can now get ATmega32 USB devices Prime delivered. Not a cutting edge theoretical attack anymore but a basic tool in a every pen tester's toolbox now.

[ Parent | on HN ]