'BadUSB' malware lives in USB firmware to remain undetected, unfixable: "As there is no easy fix to malware like BadUSB, the researchers suggest users adopt a new way of thinking about USB hardware. Instead of thoughtlessly transporting files and other data back and forth between machines, Nohl and Lell recommend connecting only to known devices that are user-owned or trusted. "

Labels: security, security flaw