How a USB-connected speaker can infect a PC without ever being touched
Summary
Ars Technica reports on a security find involving a USB/Bluetooth speaker (Sound Blaster Katana V2X) that can be coerced into acting as a PC-pwoning proxy. A researcher demonstrated how the device can be reflashed, reconfigured to report as a human interface device, and used to execute commands on a connected computer, potentially bypassing standard OS protections. The story highlights coordination with CERT, the vendor’s initial stance that the behavior isn’t a vulnerability, and the broader implications for peripheral device security.