Beware of KRACK!
If you are like me and love to read about all the recently published firmware updates (Hey, most of my TV shows are on winter break), you will notice most of them mentioned KRACK. What exactly is KRACK? That is an excellent question. Let’s have a look.
In recent weeks, a vulnerability was uncovered in the WPA2 Wi-Fi security protocol. This vulnerability called a “KRACK Attack”, uses Key Reinstallation AttaCKs (KRACK, get it?) to read information that is safely encrypted under normal circumstances. Information we all hold dear such as passwords, banking information, credit card information, etc. Behind the scenes, a key reinstallation attack is too complicated to describe in this blog, but imagine there was a virus that could change all security encryption keys to all zeros.
This vulnerability impacts all devices which use Wi-Fi regardless of type, including laptops, TVs, Wi-Fi routers and of course, mobile devices. This is due to the fact that it is related to the WPA2 protocol itself, and not an individual product or implementation of WPA2.
As soon as we were notified of any potential vulnerabilities, we worked closely with OEMs to address those issues as quickly as possible. Patches were rolled out ASAP and continue to be as of this writing.
With that said, you are in luck! To date we have already released software updates to secure your devices from KRACK on the following:
The Essential Version NMJ32F 12/06/2017
LG G3 Version LS990ZVI 11/28/2017
LG G5 Version LS992ZVD 11/28/2017
LG G6 Version LS993ZV9 11/21/2017
LG V20 Version LS997ZVB 11/21/2017
Samsung J3 Version J327PVPU3AQJ3 11/06/2017
Samsung J7 Version QJ3 11/20/2017
Samsung Note 5 Version N920PSPT3DQK1 12/04/2017
Samsung S6 Version G920PVPS4DQJ1 11/13/2017
Samsung S6 Edge Version G925PVPS4DQJ1 11/13/2017
Samsung S6 Edge+ Version G928PSPT3DQK1 12/04/2017
Samsung S8 Version G950USQU1AQJH 11/20/2017
Samsung S8+ Version G955USQU1AQJH 11/20/2017
Nexus and Pixel users, you have not been forgotten. The KRACK vulnerability was addressed in Google’s Android security update for November. And as an added bonus!! A patch has been released by Microsoft to address KRACK within Windows operating system on October 10, 2017. The moral of the story is to keep your devices up to date with the most recent versions of all software for optimal performance and security. And of course, KRACK is WACK!