Security News

Aruba’s indoor Wi-Fi 6 APs achieve Wi-Fi CERTIFIED 6 certification from the Wi-Fi Alliance
2020-03-09 01:30

Aruba, a Hewlett Packard Enterprise company, announced that its full family of high performance indoor Wi-Fi 6 access points - including the Aruba 500 Series, 510 Series, 530 Series and 550 Series APs - have achieved Wi-Fi CERTIFIED 6 certification from the Wi-Fi Alliance, making it the industry's first full family of Wi-Fi 6 indoor APs to be certified based on the Wi-Fi Alliance Wi-Fi 6 testbed of products. The Wi-Fi CERTIFIED 6 certification is designed to distinguish Wi-Fi 6 products and networks that meet the highest standards for security and interoperability to deliver exceptional end user experiences and wireless stability.

Why ‘free’ Wi-Fi isn’t really free
2020-03-03 17:56

Why would anyone want to worry about 146,000,000 database entries relating to free Wi-Fi users connecting to a free Wi-Fi service? The problem with the second sort of 'free' Wi-Fi is that the company that's giving you the 'free' service can only really make money out of it - by which we mean that they can only make you pay for it - if they keep track who you are and what you do when you connect.

Wi-Fi Chip Vulnerability
2020-03-03 12:43

The vulnerability exists in Wi-Fi chips made by Cypress Semiconductor and Broadcom, the latter a chipmaker Cypress acquired in 2016. The affected devices include iPhones, iPads, Macs, Amazon Echos and Kindles, Android devices, and Wi-Fi routers from Asus and Huawei, as well as the Raspberry Pi 3.

Wi-Fi kit spilling data with bad crypto – Huawei, eh? No, it's Cisco. US giant patches Krook spy-hole bug in network gear
2020-03-02 18:16

It looks like Switchzilla is moving swiftly to clear up the Krook bug discovered by ESET. Just hours after the researchers delivered their findings in a report, Cisco gave its own advisory on the Wi-Fi data snooping flaw. Missing C++ update opens security hole in Ubuntu 16.04.

Billions of Devices Open to Wi-Fi Eavesdropping Attacks
2020-02-27 04:07

SAN FRANCISCO - A serious vulnerability in Wi-Fi chips has been discovered that affects billions of devices worldwide, according to researchers. According to ESET, "[it] found KrØØk to be one of the possible causes behind the 'reinstallation' of an all-zero encryption key, observed in tests for KRACK attacks.

Flaw affecting 1B+ Wi-Fi-enabled devices allows attackers to decrypt wireless network packets
2020-02-27 04:00

Kr00k is a vulnerability that causes the network communication of an affected device to be encrypted with an all-zero encryption key. CVE-2019-15126 is particularly dangerous because it has affected over a billion Wi-Fi enabled devices - a conservative estimate.

Wi-Fi of more than a billion PCs, phones, gadgets can be snooped on. But you're using HTTPS, SSH, VPNs... right?
2020-02-27 00:29

An eavesdropper doesn't have to be logged into the target device's wireless network to exploit KrØØk. If successful, the miscreant can take repeated snapshots of the device's wireless traffic as if it were on an open and insecure Wi-Fi. These snapshots may contain things like URLs of requested websites, personal information in transit, and so on. When these disassociation packets are received, vulnerable Wi-Fi controllers - made by Broadcom and Cypress, and used in countless computers and gadgets - will overwrite the shared encryption key with the value zero.

Kr00k Vulnerability Exposed Data From Over a Billion Wi-Fi Devices
2020-02-26 16:02

A new vulnerability, which may have affected over one billion Wi-Fi-capable devices before patches were released, could have allowed hackers to obtain sensitive information from wireless communications, cybersecurity firm ESET revealed on Wednesday. Dubbed Kr00k and tracked as CVE-2019-15126, the vulnerability caused devices to use an all-zero encryption key to encrypt part of a user's communications, allowing an attacker to decrypt some wireless network packets transmitted by affected devices.

New Wi-Fi Encryption Vulnerability Affects Over A Billion Devices
2020-02-26 10:15

Cybersecurity researchers today uncovered a new high-severity hardware vulnerability residing in the widely-used Wi-Fi chips manufactured by Broadcom and Cypress-apparently powering over a billion devices, including smartphones, tablets, laptops, routers, and IoT gadgets. First, Learn What Kr00k Attack Doesn't Allow: Before proceeding to details of the new Kr00k attack, it's important to note that:The vulnerability does not reside in the Wi-Fi encryption protocol; instead, it exists in the way vulnerable chips implemented the encryption,.

Zyxel launches family of WiFi 6 solutions for service providers based upon IEEE 802.11ax standard
2020-02-20 02:00

Zyxel Communications, a leading provider of secure broadband networking, Internet access and connected home products, announced its family of solutions for service providers based upon IEEE 802.11ax, the latest Wi-Fi specifications standard. The new WiFi 6 solutions will enable service providers to provide subscribers with multi-gig WAN connectivity to the home through fiber, 5G and GFast networks.