Microsoft has mostly repaired flaw in Surface hardware that allowed unprotected devices to be bricked by a single packet (opens original article in a new tab)

Microsoft has fixed a firmware flaw in Surface devices that could brick them with a single packet, affecting users who disabled Secure Core and Secure Boot. The vulnerability was discovered when Microsoft Copilot's script accidentally overwrote firmware, and Microsoft stated it was not a practical threat, requiring specific conditions to exploit.

• Microsoft patched a firmware flaw in Surface devices that could brick them with a single packet, affecting those who disabled Secure Core and Secure Boot.
• The vulnerability was discovered when Microsoft Copilot's Python script accidentally overwrote the embedded controller firmware, rendering a device inoperable.
• Microsoft stated the issue was not a practical threat, requiring administrator privileges and disabled security features to exploit, and has issued updates to address the problem.