SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/sec-found-usb-drive

You find an unknown USB drive in the office hallway. What does CISA say to do with it?

Give it to IT or security, and never plug it into your computer.

Start playing free

  1. Plug it into a spare computer to find the owner
  2. Hand it to IT or security without plugging it in ✔
  3. Plug it in once, then scan it with antivirus

Why: Attackers can load malware onto a drive and leave it where someone will find it. Plugging it in, even to find the owner, can infect your computer. Let IT deal with it.

Huh, didn't know that: CISA notes attackers have even infected items like electronic picture frames during production, so a gadget can carry malware before you buy it.

The dad joke
What do you get when you cross a unit of data with a female pop singer? A Gaga byte.
Like this card?
Play the game

References

Answer: Hand it to IT or security without plugging it in. Attackers can load malware onto a drive and leave it where someone will find it. Plugging it in, even to find the owner, can infect your computer. Let IT deal with it.

  1. CISA: Using Caution with USB Drives www.cisa.gov/news-events/news/using-caution-usb-drives
    If you find a USB drive, give it to the appropriate authorities... Do not plug it into your computer
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyCan you use your personal USB drive on a computer your employer owns? What does CISA advise?Security & PrivacyHow often does the NSA suggest turning your phone off and back on?Security & PrivacyAn email includes an invoice you do not recognize and asks you to click to pay. What does the FTC say?

That's stuff everyone should know.