Plug & Pwn Attack Exploits Windows PnP to Gain SYSTEM Access With Zero Clicks

T Threat Desk Published Aug 11, 2026 · 17:36 · 1 min read GBHackers

Security researchers Alejandro Hernando, also known as 0xedh, and Borja Martínez have unveiled a research project titled “Plug & Pwn.” This project demonstrates how the Windows Plug and Play (PnP) driver installation workflows can be exploited to execute vendor-supplied code with NT AUTHORITY\SYSTEM privileges. Presented at DEF CON 34, the research explores the risky intersection […]

The post Plug & Pwn Attack Exploits Windows PnP to Gain SYSTEM Access With Zero Clicks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Source: GBHackers

Threat Desk — Threat desk.

Comments (0)

Be the first to comment.

Join the discussion

CVE & Exploits · 23h ago

AI Takes the Lead: Taiwanese Government Network Breached in First Fully Autonomous Cyber Attack

In a significant escalation of digital warfare capabilities, a hacking group linked to China has executed a highly…

CVE & Exploits · 1d ago

Cisco Rushes Out Patches for Zero-Day Firewall Vulnerability Under Active Attack

Cisco has released urgent security patches to address a critical zero-day vulnerability affecting its flagship…