Nouvelle attaque AirSnitch contourne l'isolement des clients Wi-Fi

Des chercheurs ont dévoilé AirSnitch, une série d'attaques qui contournent l'isolement des clients dans les réseaux Wi-Fi, permettant une communication non autorisée entre appareils. La technique exploite des comportements réseau de bas niveau et affecte les routeurs de grands fabricants comme Netgear, D-Link et Cisco. Présentée au Symposium sur la sécurité des réseaux et systèmes distribués 2026, les résultats mettent en lumière des vulnérabilités dans les configurations domestiques, de bureau et d'entreprise.

Les réseaux Wi-Fi, qui connectent plus de 6 milliards d'utilisateurs dans le monde, s'appuient sur l'isolement des clients pour empêcher les appareils de communiquer directement entre eux, même chiffrés. Cependant, une nouvelle recherche montre que les attaques AirSnitch peuvent contourner cette protection en ciblant les couches 1 et 2 de la pile réseau, entraînant une désynchronisation d'identité cross-layer.

Articles connexes

Dramatic server room scene illustrating the SSHStalker Linux botnet infecting thousands of vulnerable servers via SSH exploits.
Image générée par IA

Researchers discover SSHStalker botnet infecting Linux servers

Rapporté par l'IA Image générée par IA

Flare researchers have identified a new Linux botnet called SSHStalker that has compromised around 7,000 systems using outdated exploits and SSH scanning. The botnet employs IRC for command-and-control while maintaining dormant persistence without immediate malicious activities like DDoS or cryptomining. It targets legacy Linux kernels, highlighting risks in neglected infrastructure.

One week after the FCC banned sales of new foreign-made Wi-Fi routers over national security risks, new details emerge on implicated cyberattacks and growing criticism of the broad policy's effectiveness.

Rapporté par l'IA

A hacking technique called DarkSword, used by Russian hackers, can compromise iPhones running iOS 18 simply by visiting infected websites. Discovered in the wild, this tool has been deployed in espionage and cybercriminal campaigns to target thousands of devices indiscriminately. It is now available online in a reusable form, risking a large portion of iPhone users worldwide.

New research from ETH Zurich and USI Lugano reveals vulnerabilities in popular password managers, challenging their assurances that servers cannot access user vaults. The study analyzed Bitwarden, Dashlane, and LastPass, identifying ways attackers with server control could steal or modify data, particularly when features like account recovery or sharing are enabled. Companies have begun patching the issues while defending their overall security practices.

Rapporté par l'IA

Windscribe has introduced a new Android beta version of its VPN app featuring native support for AmneziaWG. This update aims to help users bypass deep packet inspection and counter internet censorship in countries like Iran and Russia. The launch addresses ongoing challenges faced by individuals seeking secure online access in restrictive environments.

Security researchers have uncovered critical vulnerabilities in the n8n automation tool. A previously released patch failed to fully address the issues, leaving users exposed. Experts provide guidance on protecting systems amid these discoveries.

Rapporté par l'IA

A straightforward hack enabled the owner of a new DJI Romo robot vacuum to connect with thousands of other devices worldwide. The incident highlights an ongoing security vulnerability in the product. TechRadar reported the details on February 18, 2026.

 

 

 

Ce site utilise des cookies

Nous utilisons des cookies pour l'analyse afin d'améliorer notre site. Lisez notre politique de confidentialité pour plus d'informations.
Refuser