tl;dw (too long; didn't write), there's a new WPA2 exploit the CIA has used for years.
WikiLeaks revealed it in one of the recent Vault 7 leaks, and like WannaCry, this exploit has the potential to be weaponised.
This time it's not only limited to just Windows, it affects everything!
Linux and Android 6.0 are the most vulnerable due to how those can be tricked into (re)installing an all-zero encryption key, but iOS, macOS, Windows, OpenBSD, MediaTek, Linksys, and many others are also affected.
Read:
KRACK Attacks: Breaking WPA2
All WiFi users open to malware attack through WPA2 glitch – study
Responses:
The Linux Kernel has been patched, and multiple Linux distributions already have this patch ready for installation, such as Arch, Ubuntu, Debian, Red Hat, OpenSUSE, and many others.
Sadly, I still need to wait as a Manjaro user.
Microsoft said it has already released a patch for Windows, though it's not clear whether it's only for Windows 10 and Server 2016, or also the older versions, or even for their mobile OSs they've recently killed off.
Apple claimed it has already patched all their products as well, provided they are still being supported.
Only loads of Android devices really remain unprotected, due to the way updates are being handled on the said platform.
What are your thoughts?
WikiLeaks revealed it in one of the recent Vault 7 leaks, and like WannaCry, this exploit has the potential to be weaponised.
This time it's not only limited to just Windows, it affects everything!
Linux and Android 6.0 are the most vulnerable due to how those can be tricked into (re)installing an all-zero encryption key, but iOS, macOS, Windows, OpenBSD, MediaTek, Linksys, and many others are also affected.
Read:
KRACK Attacks: Breaking WPA2
All WiFi users open to malware attack through WPA2 glitch – study
Responses:
The Linux Kernel has been patched, and multiple Linux distributions already have this patch ready for installation, such as Arch, Ubuntu, Debian, Red Hat, OpenSUSE, and many others.
Sadly, I still need to wait as a Manjaro user.
Microsoft said it has already released a patch for Windows, though it's not clear whether it's only for Windows 10 and Server 2016, or also the older versions, or even for their mobile OSs they've recently killed off.
Apple claimed it has already patched all their products as well, provided they are still being supported.
Only loads of Android devices really remain unprotected, due to the way updates are being handled on the said platform.
What are your thoughts?