In Part 1 and Part 2 of my blog series, I shared some insights into how attackers continue to exploit the weaknesses of WPA and the tools and techniques they are using to gain access to poorly secured networks. In the last post of the series, I will offer some suggestions for how organizations can…

In my first blog post on securing against Wi-Fi Protected Access vulnerabilities, I talked about the fact that attacks are still being developed to take advantage of weaknesses found in WPA/WPA2, which are known and have been around for a while. This post continues that discussion, getting into how exactly most attacks are carried out…

In early August this year, the folks behind the Hashcat password cracking tool posted a thread on a new attack against Wi-Fi Protected Access (WPA/WPA2) using the Pairwise Master Key Identification technique. The attack differs from the traditional WPA/WPA2 attack vector in that it does not require the capture of a full Extensible Authentication Protocol…

The entrepreneurial spirit and technology acumen of the United States provide reason for optimism in the fight against cybercriminals, said former FBI Director Robert S. Mueller III. At the helm of the FBI from September 2001 through September 2013, Mueller came to view cybercrime as a top threat to the U.S., but when organizations pulled…

The WannaCry ransomware attack has been big news since Friday, May 12, 2017, and organizations are scurrying to understand and mitigate the risk from this attack. The following is a very quick summary of the attack and specific action steps you can take to help protect your organization. This type of ransomware is unique because…

Remember the old days of phishing, where poorly written and designed e-mails linked to obviously fake websites, where you were asked to divulge your Social Security number, your mother’s maiden name, even your passwords. Those were simpler times — so much easier to spot a phishing scam. The warnings were clear and the perpetrators clumsy…