The Thunderclap vulnerabilities are a set of security flaws affecting how modern computers handle peripherals connected via Thunderbolt. An attacker with physical access to a Thunderbolt port can compromise a machine in seconds, running arbitrary code at the highest privilege level – which means they could access passwords, encryption keys, banking logins, and any other data on the system. What makes it particularly concerning is that the attack can be carried out by seemingly innocent devices like chargers or projectors that function normally while also compromising the host machine. The research behind this was published in 2019, and the platform is open-source for further study. If you want to dive into the technical details, the full breakdown is available at https://thunderclap.io/
