← All storiesTechnologyDeveloping story

How a USB-connected speaker can infect a PC without ever being touched

Seller of the Sound Blaster Katana V2X doesn’t consider the behavior a vulnerability. Operating system makers take many steps to prevent their wares from accepting commands from remote devices. The safeguards, designed to thwart malicious attacks, typically require hackers to jump through all kinds of hoops to bypass the measures. But what if remote code execution were as simple as being within Bluetooth range of a speaker connected to the targeted device? It turns out it can, at least when the speaker is a Sound Blaster Katana V2X sold by Singapore-based Creative Technologies. The speaker, which sells for $283, is widely acclaimed with numerous reviews showering praise on the sound and performance of it and its predecessor, the Sound Blaster V2. Researcher Rasmus Moorats stumbled on the hack by accident, after he purchased a Katana V2X, a soundbar that connects to PCs, Macs, and Linux devices over USB or Bluetooth. Moorats was curious if he could create a Linux tool that communicated with his speaker. He discovered he could do so through CTP, a proprietary mechanism he guesses is short for Creative Transport Protocol. CTP allows devices connected via Bluetooth or USB to send comma

1
updates in timeline
1
distinct sources
1 day
story span
Jun 5, 2026
latest update

Jun 5, 2026 → Jun 5, 2026

LATEST DEVELOPMENT
Jun 5, 2026·Ars TechnicaT2 · Outlet report
How a USB-connected speaker can infect a PC without ever being touched

Seller of the Sound Blaster Katana V2X doesn’t consider the behavior a vulnerability. Operating system makers take many steps to prevent their wares from accepting commands from remote devices. The safeguards, designed to thwart malicious…

Read original at Ars Technica →
ACTIVITY · UPDATES PER MONTH
Jun 26

1 updates from 1 source.

Showing 1 of 1 updates

Timeline (1 updates)

June 2026

1 update
Jun 5, 2026·Ars TechnicaT2 · Outlet reportLATEST
How a USB-connected speaker can infect a PC without ever being touched

Seller of the Sound Blaster Katana V2X doesn’t consider the behavior a vulnerability. Operating system makers take many steps to prevent their wares from accepting commands from remote devices. The safeguards, designed…

Read original at Ars Technica →

Sources & evidence (1)

What this story stands on. Tier 0 is a primary record or the subject's own words; higher tiers must be attributed, never stated as bare fact.

T2 · Outlet report× 1
COVERAGE BY SOURCE
Ars Technica 1
STRONGEST EVIDENCE
T2 · Outlet reportArs TechnicaJun 5, 2026

Seller of the Sound Blaster Katana V2X doesn’t consider the behavior a vulnerability. Operating system makers take many steps to prevent their wares from accepting commands from remote devices. The safeguards, designed to thwart malicious…

View source →

Tier key: T0 = Primary source · T1 = Wire · T2 = Outlet report · T3 = Commentary

Related stories

TechnologyT2 · Outlet report

Your iPhone may support Channel Sounding via Bluetooth with iOS 27 - and it's a big deal - ZDNET

Our gifting experts are obsessively searching for holiday gifts that are unique, thoughtful and suitable for any budget. One less-discussed iOS 27 feature unveiled at Apple's WWDC…

1 update1 source
Jun 16, 2026
Latest: Your iPhone may support Channel Sounding via Bluetooth with iOS 27 - and it's a big deal - ZDNET · ZDNet
TechnologyT2 · Outlet report

Your Microsoft text codes are going away

This material may not be published, broadcast, rewritten, or redistributed. ©2026 FOX News Network, LLC. All rights reserved. Quotes displayed in real-time or delayed by at least…

3 updates2 sources10 days long
Jun 1, 2026 → Jun 11, 2026
Latest: Microsoft patches record 206 Windows bugs in June update - and 3 are zero days - ZDNET · ZDNet
TechnologyT2 · Outlet report

Ultrahuman says hackers accessed customers' wellness data via internal tool | TechCrunch

Last day to exhibit your breakthrough to 10,000+ tech leaders at Disrupt is on Oct 2. Book Exhibit Table Now. Disrupt doors open Oct. 13. Get your pass and bring someone with you…

3 updates2 sources7 days long
Jun 3, 2026 → Jun 10, 2026
Latest: Cybercriminals claim breach of Oracle PeopleSoft servers at 100-plus organizations | TechCrunch · TechCrunch
GeneralT2 · Outlet report

Kim Jong Un inspects new nuclear plant, plans ‘exponential’ weapons production ramp-up | CNN

Kim Jong Un inspected a new plant that makes weapons-grade nuclear material on Wednesday and said Pyongyang plans to “beef up our state’s nuclear forces at an exponential…

3 updates3 sources7 days long
Jun 4, 2026 → Jun 10, 2026
Latest: North Koreans behind nearly half of US tech industry hacks, says CrowdStrike | TechCrunch · TechCrunch
TechnologyT2 · Outlet report

Anthropic is reportedly about to have its first profitable quarter - Engadget

It’s on track to post $10.9 billion in revenue, according to The Wall Street Journal. Anthropic is on track to post a revenue of $10.9 billion for the quarter ending in June,…

21 updates10 sources3 weeks long
May 21, 2026 → Jun 10, 2026
Latest: Claude Fable is too scared to teach you about the powerhouse of the cell · The Verge
GeneralT2 · Outlet report

How ditching the homeownership dream allowed this finance coach to retire early

Delyanne Barros says that investing is not as complicated or intimidating as people imagine it to be Delyanne Barros got a late start with investing. She was 37 years old before…

2 updates2 sources8 days long
Jun 2, 2026 → Jun 10, 2026
Latest: A Chinese state-linked botnet has grown to 1,500 hacked routers and is mapping vulnerable targets within… · The Next Web