Like most microcontrollers, it relies on two primary software layers:
Defensive Implications: How to Protect Against Patched USB Attacks phison ps225109 patched