3 Takeaways for the KRACK WPA2 Vulnerability

WiFi Security and WPA2

Over the last 48 hours security researchers have discovered new weaknesses in the WPA2 Wi-Fi security protocol which could allow hackers to steal sensitive info or even inject malware into networks and network devices, with mobile devices being particularly vulnerable due to the proliferation of native apps which may not implement app-level encryption.  

As stated on KrackAttacks, the weaknesses are in the Wi-Fi standard itself, and not in individual products or implementations. Therefore, any correct implementation of WPA2 is likely affected. 

The attack works by focusing on the four-way handshake used by WPA2 to confirm that client and access point have the correct network password and to negotiate a new encryption key to be used to encrypt all subsequent traffic. 

To prevent the attack, users must update affected products as soon as security updates become available. 

1. There is no silver bullet for cyber threat prevention; nothing is secured forever. Vulnerabilities will always await discovery and be subject to exploitation. Developers call them “bugs”, but we must all learn to speak the same language, and adopt a holistic layered approach.

2.  SANS Institute describes the term layered security as “a defensive strategy featuring multiple defensive layers that are designed to slow down an attacker”. The military uses similar tactics called “deep defense” or “defense in depth,” where their goal is to slow an attack, causing enemy casualties. In the digital world, this means causing delays for the attackers and detecting them before they can do serious damage. In some cases, a properly implemented layer may act as a strong enough deterrent to cause the attacker to look for an easier target.

3. Although an attacker may gain wireless access into your network, a layered security approach will ensure that the hole discovered can’t be exploited. By adhering to best practices like keeping systems patched and updated, implementing user roles and group policy, having end-to-end network segmentation in place to limit the spread of malware and free reign of bad actors, utilizing multi-factor authentication (MFA), securing data with data at rest and in-flight encryption, and taking advantage of app-level encryption where possible. 

If you’d like to discuss the threat landscape and how things like this WPA2 crack happen, best practices for adopting a holistic security approach, or the unique challenges inherent to your business, please reach out to me directly. We’re here to help. 

Myriad Congratulates Employees Celebrating Anniversaries this Month

October Anniversaries

At Myriad, we believe that whether personal or professional, anniversaries are a special event in a person’s life. This month, we are celebrating the work anniversaries of seven exceptional members of the Myriad team. Huge congratulations are due to:  

AnniversaryTemplate_Mario (002)Celebrating: 12 years 

A lot has changed for Mario since becoming Myriad’s very first engineer (lucky #7 employee) twelve years ago. Now he is leading and growing the Solutions Architect team, driving pre-sales engineering capabilities farther as Solutions Architect Manager. “I enjoy working with everybody on the pre-sales & post-sales side of the house. Everyone is compassionate, caring and understanding. We all try our best to get the job done right.” 

Best Myriad memory: “It’s been a great journey and rewarding experience to be part of the Myriad family since the beginning when it was just 7 of us –  a true startup! I remember wearing many hats, from testing Cisco 1700 routers and WIC-1DSU-T1’s (now vintage) to working in sales, returns, purchasing and shipping departments! I love being a part of a place where I’ve been able to witness both my career path and the company grow firsthand.” 

AnniversaryTemplate_StaceyCelebrating: 7 years 

Over her illustrious career, Stacey Solomon was promoted four times from Purchasing Assistant to her current role as Director of Purchasing, and it’s no secret that her passion for her job led to her success. “My favorite thing is the feeling that I have waking up and coming to work every day.  I really love my job and working here at Myriad.” 

Best Myriad memory: “The first holiday party. I recall us all piling into limos and heading to Wolfgang’s for dinner. It was my first time riding in a stretch limo so I was pretty excited.” 

AnniversaryTemplate_Will (002) Celebrating: 4 years 

William Sze believes the people and the culture are what make Myriad great. He was promoted to Staff Accountant two years ago and knows crunching numbers can be a tedious job, but “the people and culture at Myriad make going to work every morning much easier.”  

Best Myriad memory: “All of our parties!” 

AnniversaryTemplate_Erin (002)Celebrating: 4 years 

After joining the company as an Operations Assistant, it’s wasn’t long until her talent for hiring A-players shown through. Transitioning to her role as Hiring Coordinator 2 years ago, Erin’s favorite parts of her job are “the 1-1 coaching sessions, great coworkers, and ability to create my workflow.”  

Best Myriad memory: “Announcing the LGBTQ+ inclusive Employee Resource Group at a company-wide meeting.” 

AnniversaryTemplate_KarenCelebrating: 3 years 

As one of the warmest, friendliest Myriad team members, it was no surprise that when asked what her favorite thing about working about Myriad, Karen’s answer was simple: “The people.”  

Best Myriad memory: “When one of the members of our team experienced a fire at her apartment, I’ll never forget the way the office rallied together to support one of our own.” 

AnniversaryTemplate_AlbertLiCelebrating: 2 years 

As a Pricing Support Specialist, Albert notes that the encouragement he receives through the coaching sessions is one of the reasons he’s so great at helping our clients. “It’s amazing to know you have the support of those around you when you’re trying to achieve ever larger goals.” 

Best Myriad memory: “The first week when I started here. I remember clearly being welcomed by just about everyone I ran into that day. The environment was just so friendly that it’s stuck with me since then.” 

AnniversaryTemplate_ChelsCelebrating: 2 years
Chelsea joined Myriad as an intern and quickly became an Events and Community Coordinator soon after. She attributes her success to cross departmental support and collaboration. (“And the unlimited supply of peanut butter doesn’t hurt either!”) 

Best Myriad memory: “2017 Myriad Summer Party Pop-A-Shot Tournament, although losing in the first round to our VP of Sales who still reminds me to this day that he beat me by TWO POINTS. It was great to see fierce match-ups and an excited audience gather around for this event.” 

Thank you to Mario, Stacey, William, Erin, Karen, Albert and Chelsea for your dedication, drive, and geniality. We look forward to seeing more of your accomplishments in the future!