Skip to content
NewA calmer, faster ZeroHour
StoryResearchmedium

Researcher finds hardcoded keys in USB copy-protection tools

2 sources · 2 articlesFirst reported Updated ()1
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Xusheng Li used OpenAI Codex to recover hardcoded keys and hidden accounts in several USB protection products.

Researcher Xusheng Li used OpenAI Codex with Binary Ninja’s Model Context Protocol to analyze encrypted USB and copy-protection software. He found hardcoded keys, hidden accounts, and password checks that did not protect content keys in SecZure YutianDun, NetacFileLock, KakaSoft USB Copy Protection 5.6.0.299, and Nexcopy Copy Secure. NetacFileLock’s fixed 32-byte AES-256 key was recovered in seven minutes; KakaSoft’s highest setting was decrypted in about 26 minutes. Li published the findings on Binary Ninja’s blog on October 22, 2026, without coordinated disclosure, and said the results do not show every encrypted USB drive is vulnerable.

Key facts
  • NetacFileLock used a fixed 32-byte AES-256 key independent of the password.
  • YutianDun accounts Buffer and System used passwords 123456 and SECZURE.COM.
  • KakaSoft High mode used 256 key variations; Highest used Blowfish-CBC from an embedded seed.
  • Nexcopy used three-key Triple-DES and a fixed viewer secret via Drive Wizard 1.0.81.
  • Li called the YutianDun accounts a technical backdoor, not proof of intent.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Oct 22, 2026Li published USB encryption findings on Binary Ninja’s blog. · Cyber Security News

What each outlet adds

beyond the shared facts
  • GBHackersSeven-minute Netac result, KakaSoft key modes, and Triple-DES detail.
  • Cyber Security NewsAccount passwords, 26-minute KakaSoft result, and October 22 publication.
Vendors
OpenAISecZureKakaSoftNexcopyNetac
Products
NetacFileLockYutianDunUSB Copy ProtectionCopy SecureDrive WizardBinary NinjaCodex
Organizations
Binary Ninja
AI models
OpenAI Codex

Coverage

oldest first · one row per article · UTC
  1. · 4d ago GBHackersFirst report

    OpenAI Codex recovers keys from four encrypted USB products

    Hardcoded AES, SM4, and Triple-DES keys and hidden accounts let files be decrypted without the user password.

  2. · 3d ago Cyber Security News

    Researcher uses Codex to bypass four USB encryption products

    Hidden accounts and hardcoded keys decrypted protected files without owner passwords, one flaw in seven minutes.