New Wi-Fi Takeover Attack—All Windows Users Warned To Update Now

Microsoft has identified a critical Wi-Fi vulnerability, labeled CVE-2024-30078, affecting all supported Windows versions. This flaw, which scores 8.8 out of 10 on the Common Vulnerability Scoring System, allows unauthenticated attackers in physical proximity to execute remote code on targeted devices without user interaction. Environments with numerous Wi-Fi connected devices, such as hotels and trade shows, are particularly at risk. It is crucial to apply the latest security patches immediately or use endpoint detection if patching is unfeasible. The vulnerability bypasses most network-based protections and is part of Microsoft's June 2024 Patch Tuesday update.

Opens on Forbes