New Tools Bypass Wireless Router Security
Summary: Security researchers released free tools that brute-force the 8-digit WPS PIN shipped on many consumer and small-business wireless routers, with Stefan Viehböck's tool testing all combinations in about four hours on TP-Link and D-Link routers and under 24 hours on a Netgear router. US-CERT issued a Dec. 27 advisory naming Belkin, Buffalo, D-Link, Linksys, Netgear, TP-Link and ZyXEL as affected, and Viehböck said none of the router makers appeared to have issued firmware updates.
Why it matters: Craig Heffner noted that once the WPS PIN is guessed, an attacker instantly recovers the router's encryption passphrase even if the owner changes it, and on dual-radio access points can recover all WPA keys. Devices with WPS are vulnerable whether or not users enable it, and the feature is likely on by default.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026