(Mis)adventures with Copilot+ - Attacking and Exploiting Windows NPU Drivers

Explore the security vulnerabilities in Windows Neural Processing Unit (NPU) drivers through this 36-minute Black Hat conference talk that examines Microsoft's Copilot+ PCs introduced in May 2024. Dive deep into NPU architecture and understand how these AI-focused drivers are implemented in Windows systems designed to run Large Language Models locally. Learn about various attack vectors targeting NPUs and discover how attackers can interact with these specialized processors. Examine real-world security bugs from two different NPU vendors, including a detailed demonstration of privilege escalation exploitation on one NPU system. Gain practical insights into NPU vulnerabilities and their security implications while learning exploitation techniques applicable to Copilot+ PCs running the latest Windows 11 version 24H2, presented by cybersecurity researchers from Zürich University of Applied Sciences.