What You Should Know About the ‘KRACK’ WiFi Security Weakness
Summary: Researchers published details of KRACK, a Key Reinstallation AttaCK flaw in the WPA2 Wi-Fi standard itself, which allows an attacker within range of a wireless signal to steal data such as passwords, chat messages and photos, and in some configurations to inject ransomware or other malware into websites. Because the weakness is in the standard rather than individual products, any correct WPA2 implementation is likely affected, potentially including devices running Android, Apple, Linux, OpenBSD and Windows.
Why it matters: The public announcement was held for weeks so Wi-Fi hardware vendors could produce updates, yet many products on the CERT list are still marked unknown as to whether they are vulnerable, and Android devices are likely to need patching soon. The organizations most exposed are those that have not separated their wireless networks from their enterprise wired networks.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026