1. A security researcher named Matthi Vanhoff has exposed the flaws of WPA2. Actually, this protocol secures modern protected Wi-Fi networks.
2. These vulnerabilities are exploited through key reinstallation attacks (KRACKs). And the targets are devices using Wi-Fi – laptops, smartphones and smart homes. Any device that connects to the router via Wi-Fi is a target.
3. Vanhof has claimed that apart from stealing sensitive information, it is also possible to tamper with the data. For example, an attacker may inject ransomware or malware onto a website.
4. The shortcoming is in the Wi-Fi standard itself, not in any one product. This means that every true implementation of WPA2 is affected by this.
5. Apart from Apple devices, all devices running on Android, Linux, Windows and OpenBSD are affected by some attack. To avoid attacks, users should update their products as soon as they get security updates.
6. Vanhof has said that the password of your Wi-Fi network is not stolen in the attack. This means that changing the password of a Wi-Fi network will not protect you. You need to make sure that your device is updated. You should also update your router's firmware. After updating the router, you can change the Wi-Fi password for additional security.
7. It's possible that the router may not need an update because the attack is on the Wi-Fi client. You should contact your vendor for more information. The most important thing for common users is to update their laptops and smartphones.
8. Vanhof recommends users not to switch to the insecure WEP protocol on their routers. Unless the device has been patched.
9. As a user, you have no option but to wait for the update for your smartphone and laptop. You install them as they become available.
10. The phones which the company itself has stopped giving updates. There will be danger of attack on them.