A security flaw made a concerning appearance this week after the bug, dubbed a ‘Krack attack’, wasdiscovered by Belgian researchers. Targeting Wi-Fi encryption, the bug can access safely encrypted information such as emails, passwords and credit card numbers.
These researchers have predicted every device that connects to Wi-Fi is at risk of a Krack attack. Other security experts believe the bug will take decades to be completely eradicated. We outline everything you need to know about this flaw and how to reduce your risk of an attack.
What is a Krack Attack?
A ‘Key Reinstallation Attack’ or ‘Krack attack’, is a security encryption flaw in the WPA2 system. This system secures a Wi-Fi connection between a router and a device. When a device connects with a router, the internet can be accessed and an encryption key is then generated. This key is what makes your data ‘uncrackable’ to anyone who might intercept it.
However, at this point, hackers can trick this encryption key to be reinstalled, resetting it to zero. Resetting this causes the session to become unencrypted, and exposes sensitive user data. Malicious software can also be inserted into legitimate websites, leaving any user who visits the site at risk of data exposure.
4 Ways to Protect Yourself
1. Update your device
Updating your device with the latest security patch is the leading way to prevent a Krack attack. Vulnerable devices include anything which plays a part in your Wi-Fi network, such as computers, phones, TVs and printers. Android mobile user? Unfortunately you’re at the highest risk of an attack, as they are the hardest and slowest devices to patch, however it’s still important to patch your device as soon as you can.
Companies have been responding in different ways to the new bug, check the status of your security patch below –
- Microsoft– a patch for Windows has been released fixing the flaw.
- Apple–a patch is expected to become available for the beta versions of iOS, macOS, watchOS and tvOS, in the coming weeks.
- Google– announced they will be releasing an Android patch in the upcoming weeks.
2. Update your router’s firmware
Install the latest security update for your router as soon as it becomes available. Router manufacturers such as Cisco already have fixes available for their affected products.
3. Avoid public Wi-Fi
It’s best to avoid all public Wi-Fi until a patch is installed. Without any clear idea of who is on the network or how it is being used, you leave yourself open to an attack.
4. Only Access Secure Websites
Only access websites with HTTPS in their address. This will add another layer of protection and ensure you are only connecting to secure websites.
As technology advances, so do the methods of predatory hackers. Regularly update your device to ensure your data is securely protected.
- How To Build a Competitive Advantage With IT - 10 October 2022
- How To Measure Success In Your IT Department - 7 October 2022
- The Simple IT Strategy Framework for a Post COVID-19 Workplace - 6 October 2022