Creative Katana speakers vulnerable to remote BadUSB attacks via USB
Researcher discovers that Creative Katana V2X speakers can be turned into covert BadUSB devices via their USB‑connected speaker, allowing attackers within ~15 m to inject commands and exfiltrate data without pairing. The flaw stems from a static authentication key and firmware update protocol, turning the speaker into a rubber‑ducky‑style attack vector.