Microsoft has mostly repaired a flaw in Surface hardware that allowed unprotected devices to be bricked by a single packet

Microsoft patched a firmware flaw in Surface devices' SAM embedded controller that could be abused by crafted SSAM ioctl commands to overwrite UEFI/Secure Boot firmware and permanently brick affected units; a researcher’s Copilot session accidentally triggered the condition. Microsoft says exploitation requires local administrator privileges and Secure Boot to be disabled, most affected devices have been updated, and the bug did not meet the bar for a CVE.