X

Applied Microsoft's security updates? You're safe from KRACK

Microsoft says customers who applied Oct. 10 Windows updates are free from the Wi-Fi security flaw.

Abrar Al-Heeti Technology Reporter
Abrar Al-Heeti is a technology reporter for CNET, with an interest in phones, streaming, internet trends, entertainment, pop culture and digital accessibility. She's also worked for CNET's video, culture and news teams. She graduated with bachelor's and master's degrees in journalism from the University of Illinois at Urbana-Champaign. Though Illinois is home, she now loves San Francisco -- steep inclines and all.
Expertise Abrar has spent her career at CNET analyzing tech trends while also writing news, reviews and commentaries across mobile, streaming and online culture. Credentials
  • Named a Tech Media Trailblazer by the Consumer Technology Association in 2019, a winner of SPJ NorCal's Excellence in Journalism Awards in 2022 and has three times been a finalist in the LA Press Club's National Arts & Entertainment Journalism Awards.
Abrar Al-Heeti
microsoft-surface-laptop-008.jpg

If you have Windows Update enabled and applied recent security updates, you should be safe. 

Sarah Tew/CNET

Microsoft customers who have enabled Windows Update and applied security updates from Oct. 10 are automatically protected from a Wi-Fi security flaw nicknamed "KRACK," according to a company spokesperson. 

The weakness in the WPA2 protocol, designed to protect wireless networks and devices, was discovered by computer security academic Mathy Vanhoef, CNET sister site ZDNet reported Monday. "KRACK" is short for Key Reinstallation Attack. The protocol is central to most modern Wi-Fi devices, such as computers, phones and routers. This places virtually all wireless-enabled devices at risk.  

The bug could allow hackers to eavesdrop on your network traffic.   

"We updated to protect customers as soon as possible, but as a responsible industry partner, we withheld disclosure until other vendors could develop and release updates," the Microsoft spokesperson said.