Many people know that WEP security on Wi-Fi is easily broken, but very few know that WPA and even WPA2 secured networks are also at risk. With the release of a publically available open source tool called Reaver, now almost anyone can crack most WPA and WPA2 networks. In short, a huge percentage of Wi-Fi networks can be broken.
Just last December, Stefan Viehbock reported that most WPS-enabled Wi-Fi routers are susceptible to a brute force attack. What makes this vulnerability so problematic is how easy it is to do by using just one of a few free programs. Lifehacker explains how Reaver can be used easily Crack a WPA or WPA2 password in a few hours, and how the program is used. They also give a brief explanation as to how you might protect your networks against Reaver attacks. The article is definitely worth a read if you are concerned with your data security.
Another vulnerability with your WPA2 Wi-Fi security was uncovered by AirTight Networks, and is known as “Hole 196.” This vulnerability is not as easy to use, but still poses a risk:
Hole 196 lends itself to man-in-the-middle-style exploits, whereby an internal, authorized Wi-Fi user can decrypt, over the air, the private data of others, inject malicious traffic into the network and compromise other authorized devices using open source software, according to AirTight.
-Joanie Wexler, Network World
With some routers, you can solve the WPS vulnerability by completely disabling the WPS option on your router. The problem is that not every router has this option, and WPS is usually turned on by default. You can also disable the wireless network on susceptible devices, but this might be a problem if you use laptops and mobile devices. Some routers have an automatic block built in them to stop successive failed attempts, but this merely slows down the process.
With Wi-Fi security up in the air, it is recommended to use a VPN to encrypt your internet traffic and ensure your computers are properly firewalled when surfing at public Wi-Fi hotspots. This will greatly protect your data and security even in the event someone does break the Wi-Fi key.