Wireless security covers risks in Wi-Fi, Bluetooth, and cellular connections, including unauthorized access, eavesdropping, and device compromise.
Search across headline titles and summaries.
Background for this topic.
Wireless systems transmit data over radio or other electromagnetic links rather than a physical cable, including Wi-Fi, Bluetooth, cellular, and many IoT protocols. The tag usually covers the security of these protocols, access points, client devices, and radio-enabled equipment—not every use of the word “wireless.”
Because signals can extend beyond controlled spaces, an attacker within range may capture traffic, attempt unauthorized association or pairing, impersonate a legitimate access point, or disrupt service through interference. Encryption alone does not prevent these attacks: use secure authentication, current protocol configurations, protected management interfaces, and segmentation between wireless clients and sensitive networks. Track firmware and protocol vulnerabilities, remove obsolete security modes, monitor for rogue devices and unusual associations, and review wireless logs during investigations. Bluetooth and IoT deployments also require attention to default credentials, discoverability, and unnecessary exposed services.
Weekly headline count for the current query.
Threat actors are exploiting security flaws in TBK DVR and end‑of‑life (EoL) TP-Link Wi-Fi routers to deploy Mirai-botnet variants on compromised devices, according to findings from Fortinet FortiGuard Labs and Palo Alto Networks Unit 42
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added two security flaws impacting TP-Link wireless routers to its Known Exploited Vulnerabilities (KEV) catalog, noting that there is evidence of them being exploited in the wild
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity security flaw in TP-Link wireless routers to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability in question is CVE-2023-33538 (CVSS score: 8.8), a command injection bug that could result in the execution of arbitrary system commands when
Cisco has released software fixes to address a maximum-severity security flaw in its IOS XE Wireless Controller that could enable an unauthenticated, remote attacker to upload arbitrary files to a susceptible system
Fortinet has patched CVE-2023-34990 in its Wireless LAN Manager (FortiWLM), which combined with CVE-2023-48782 could allow for unauthenticated remote code execution (RCE) and the ability to read all log files.
Critical-rated CVE-2024-20017 allows remote code execution (RCE) on a range of phones and Wi-Fi access points from a variety of OEMs.
Redmond splats dozens of bugs as does Adobe while Arm drivers and PHP under active attack Patch Tuesday Microsoft kicked off our summer season with a relatively light June Patch Tuesday, releasing updates for 49 CVE-tagged security flaws in its products – including one bug deemed critical, a fairly terrifying one in wireless networking, and one listed as publicly disclosed.…
Tracked CVE-2023-25717, the flaw was recently exploited by the AndoryuBot botnet, says Fortinet
The Mirai malware botnet is actively exploiting a TP-Link Archer A21 (AX1800) WiFi router vulnerability tracked as CVE-2023-1389 to incorporate devices into DDoS (distributed denial of service) swarms. [...]
Cisco has released a security advisory to warn about a critical vulnerability (CVSS v3 score: 10.0), tracked as CVE-2022-20695, impacting the Wireless LAN Controller (WLC) software. [...]