LINUX-BASED LENOVO WEBCAMS' FLAW CAN BE REMOTELY EXPLOITED FOR BADUSB ATTACKS

Summary from the TLDR InfoSec newsletter

Security researchers discovered vulnerabilities in Lenovo 510 FHD and Performance FHD webcams that allow attackers to remotely transform them into BadUSB devices capable of injecting keystrokes and installing malware. The Linux-based webcams lack firmware validation, enabling complete compromise and persistent re-infection even after system wipes and OS reinstalls. Lenovo has released firmware version 4.8.0 to address the vulnerabilities following responsible disclosure in April.