Plug & Pwn lets attackers hijack Windows 11 via fake USB, even over RDP
Attack uses Windows Plug and Play auto‑install to fetch signed drivers, chaining two vendor bugs to gain SYSTEM on patched Windows 11, and can be triggered remotely through RDP USB redirection. Shows zero‑click hardware‑less privilege escalation is possible on fully updated systems.