Discovered vulnerability that jeopardizes more than one billion devices

ESET researchers discovered Kr00k (CVE-2019-15126), a hitherto unknown vulnerability to Wi-Fi chips used on client devices, Wi-Fi access points and routers. The Kr00k vulnerability encrypts the network communication of an infected device with an “all-zero” encryption key, enabling the cyber-criminal to decrypt wireless network packages and successfully crown its attack. Kr00k’s discovery is linked to previous ESET investigation into security gaps detected in the Amazon Echo,

Read more...