It seems the WPA2 encryption system used by most WiFi networks is badly broken:
- New KRACK Attack Against Wi-Fi Encryption
- KRACK! Wifi’s go-to security, WPA2, is fatally flawed, and will probably never be patched in many places
- WPA2: Broken with KRACK. What now?
- ‘All wifi networks’ are vulnerable to hacking, security expert discovers
This follows recent breaks in core security technologies like SSLStrip and Heartbleed.
People with good security practices like defence in depth and compartmentalization of sensitive information might not be too threatened by this. Those relying exclusively on the integrity of WPA2 may be in big trouble.
What are you sharing on your wireless network? Any file servers, cameras, or other sensitive systems?
Do you run your internet traffic through a second layer of encryption like a VPN and stick to HTTPS/TLS for sensitive websites?
