WiFi devices recognize keystrokes with 97.5% accuracy
WiKey system uses WiFi channel state information to detect and classify typed keys on standard keyboards at high accuracy.
Stories per day · 30 days
2 RSS
Relatedbroadcom2routers2wps2eap7701ecos1encryption1google-fi1hotspot1ipq95741isp-gateways1kernel-exploit1keystroke1linux1pixel1privacy1qualcomm1remote-code-execution1sfe1
13 stories, newest first · one card per story
Stories tagged #wifi
Broadcom WPS flaw lets nearby attackers gain root on Wi-Fi routers
The bug has sat in Broadcom’s SDK since at least 2010, has no CVE, and tested Belgian gateways were still unpatched.
Broadcom Wi-Fi bug since 2010 allows unauthenticated router code execution
Quentin Kaiser demonstrated exploits on two Belgian ISP routers; Broadcom assigned no CVE after an incomplete 2018 fix.
Wanted to download an ISO, ended up writing a kernel exploit
Researcher wrote a kernel exploit to root an EOL TP-Link EAP770 after Wi-Fi downloads silently corrupted.
Hacking the Eufy Doorbell and Base Station
A researcher showed Eufy doorbells can be deauthenticated off hidden Wi-Fi and credentials recovered from memory.
Secrets in Preamble: Practical and Robust PHY Information Hiding for Wi-Fi
Researchers embed 46 secret bits in Wi-Fi L-STF preambles with neural networks without breaking packet detection.
Protocol Integration of Physical Layer Deception into EAP-TEAP Wi-Fi Authentication
Researchers integrate physical-layer deception into EAP-TEAP Wi-Fi authentication in hostap 2.12.
Fast and Secure Simultaneous Authentication of Equals for WPA3
A modified WPA3 SAE handshake moves costly crypto to clients and uses tickets to limit AP DoS.
USN-8661-5: Linux kernel (Raspberry Pi) vulnerabilities
Ubuntu patches Raspberry Pi Linux kernel flaws, including Wi-Fi mesh packet injection CVE-2025-27558.
USN-8715-2: Linux kernel (AWS FIPS) vulnerabilities
Ubuntu fixes CVE-2025-27558, a Linux WiFi mesh flaw caused by an incorrect CVE-2020-24588 fix, letting physically proximate attackers inject packets, plus other kernel updates.
CrossLink: Breaking Location Privacy by Linking Device Identifiers Across Protocols
Researchers present CrossLink, a passive tracing algorithm linking temporary device identifiers across LTE, WiFi, and BLE, reconstructing full traces for 83% of simulated users.
DEF CON crowd suspected in fake-hotspot attack on Delta flight
FBI Atlanta is investigating a fake in-flight Wi-Fi hotspot attack on a Delta flight, with DEF CON attendees suspected and no arrests made.
1
Delta investigates in-flight Wi-Fi spoofing on post
A passenger on Delta flight 591 allegedly spoofed the airline's in-flight Wi-Fi with a rogue access point, prompting an FBI and FAA investigation.