Network controllers with DMA would also be prime targets that could even be tailored for a specific victim's network. They can sit passively and monitor for int

Network controllers with DMA would also be prime targets that could even be tailored for a specific victim's network. They can sit passively and monitor for interesting network traffic as well as sift through memory unimpeded. And when something needs exfiltrating, it can send out packets undetectable by the cpu. Edit- oh, and dropping code into memory for the CPU to run is not unpossible either.