211
Two never-before-seen tools, from same group, infect air-gapped devices
(arstechnica.com)
This is a most excellent place for technology news and articles.
When the drive is mounted noexec it's not possible to run any programs on it. You can also mount any user writable directories noexec so they can't copy the program somewhere else and run it.