Inglourious Drivers The Revenge of the Peripheral Devices

This talk looks at device drivers that come bundled with peripheral hardware and asks what happens when those drivers contain security flaws. The title points to the familiar problem of drivers running with high privilege on the host, where a single weak component can give an attacker a route from ordinary access to deeper control of the machine.

The middle of the talk turns to the kind of vulnerable driver that keeps appearing in real systems. The speaker describes drivers that were shipped with products and then left in place, including cases where a model was retired from service while its driver stayed on machines in the field. Those leftover components are the kind of attack surface defenders often miss, because the hardware looks harmless and the software is rarely inventoried or updated.

The closing portion touches on the disclosure side of the work and on the guidance given to people who want to read more. For a practitioner, the main takeaway is that peripheral drivers deserve the same scrutiny as any other privileged code. Teams should track which drivers are present on their endpoints, check whether they are still supported, and treat old or unmaintained device software as a potential weak point even when the hardware itself seems unimportant.