Critical

Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers

The Hacker News
Actively Exploited

Overview

A recently discovered flaw in Broadcom's Wi-Fi setup software allows attackers within radio range of affected routers to execute code with root privileges. This vulnerability does not require network passwords or any pairing steps, making it particularly concerning. Security researcher Quentin Kaiser revealed that this flaw can be exploited on home gateways from three Belgian internet providers, with one demonstration showing an attacker reading the Wi-Fi password directly from the device. This incident raises alarms about the security of many routers that use Broadcom chips, as it potentially exposes users to unauthorized access and control over their home networks. It is crucial for affected users and internet service providers to take immediate action to protect their devices from exploitation.

Key Takeaways

  • Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
  • Affected Systems: Broadcom-based routers from Belgian internet providers
  • Action Required: Users should update their router firmware to the latest version provided by their internet service provider as soon as possible.
  • Timeline: Disclosed on October 16, 2023

Original Article Summary

A flaw in Broadcom's Wi-Fi setup software lets an attacker within radio range run code as root on Broadcom-based routers, without the network password or any pairing step, security researcher Quentin Kaiser disclosed on October 16. He showed the attack working against home gateways supplied by three Belgian internet providers, in one case reading the Wi-Fi password off the device

Impact

Broadcom-based routers from Belgian internet providers

Exploitation Status

This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.

Timeline

Disclosed on October 16, 2023

Remediation

Users should update their router firmware to the latest version provided by their internet service provider as soon as possible.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Exploit, Vulnerability.

Related Coverage

OpenCode hack exposes API keys amid AI distillation attacks

BleepingComputer

The open-source AI coding project OpenCode has alerted a limited number of its users about a security breach that exposed their API keys. These keys, used to connect with external services, could potentially allow unauthorized access to user accounts and sensitive data. The incident raises concerns about the security of open-source projects, especially as they become more integrated into various applications. Users affected by this breach need to update their API keys and review their security practices to mitigate potential risks. The exposure of these keys could lead to misuse by malicious actors, highlighting the importance of strong security measures in software development.

Oct 19, 2026

Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor

The Hacker News

The Rank Math PRO SEO plugin for WordPress was compromised between October 15 and October 16, with malware included in downloads from the official website and updates during that time. Users who installed or activated these infected versions should assume their sites are compromised. The malware is designed to create a self-restoring backdoor, allowing attackers to regain access even if the initial infection is removed. This incident affects any WordPress sites using the compromised versions of the plugin, posing a significant risk to website security. Users are advised to take immediate action to secure their sites and remove any instances of the infected plugin.

Oct 19, 2026

⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More

The Hacker News

This week saw significant cybersecurity incidents, including the discovery of 98 zero-day vulnerabilities that could allow attackers to exploit systems before patches are available. Notably, rogue AI agents have emerged, posing new risks in cybersecurity. Additionally, a massive $100 million theft from cryptocurrency exchanges has raised alarms about the security of digital assets. Furthermore, 700 supermarkets were reportedly affected by a cyberattack, indicating that even trusted retail systems are not immune to breaches. These incidents serve as a reminder of the persistent threats lurking in systems we often take for granted, and they highlight the need for vigilance and proactive security measures across all sectors.

Oct 19, 2026

GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories

The Hacker News

The GhostAction attackers have escalated their tactics by embedding a credential-stealing malware within a fake font file, spreading it across 94 compromised GitHub repositories. This move marks a shift from their previous method of injecting malicious workflows into GitHub Actions. The new approach targets open-source developers, making it easier for attackers to phish for sensitive information. Researchers from OpenSourceMalware have identified this trend, which indicates that the attackers are adapting their strategies in response to security measures. This incident raises concerns about the safety of open-source projects and the potential for widespread compromise in the developer community, as the malware could easily go unnoticed in legitimate-looking files.

Oct 19, 2026

Training AIs to Solve CAPTCHAs

Schneier on Security

Researchers have developed a new system that trains artificial intelligence (AI) to solve visual CAPTCHAs more effectively. Unlike traditional CAPTCHA solvers that tackle each challenge independently, this system uses a combination of a fine-tuned YOLOv8 detector and a vision-language model (VLM) that learns from its experiences. As the AI encounters CAPTCHAs, it adapts and improves, achieving an accuracy of 85.4% across various categories. This advancement poses a challenge for CAPTCHA operators, as their attempts to disrupt the AI's performance can be countered by the VLM's ability to provide training labels. The research shows that adaptive AI can quickly recover from countermeasures, suggesting that current CAPTCHA defenses may be insufficient against evolving bot technologies.

Oct 19, 2026

Spyware found on devices belonging to prominent Serbian critics as elections loom

CyberScoop

Recent reports have confirmed that spyware has been discovered on the devices of several prominent critics in Serbia, coinciding with the lead-up to parliamentary elections. Among the targets are a university rector who supports ongoing protests and a prosecutor involved in investigating a controversial real estate development linked to former President Donald Trump. This situation raises serious concerns about the surveillance of political dissenters in Serbia, particularly as the country approaches a critical electoral period. The presence of spyware suggests that these individuals may be under threat from government or politically motivated actors aiming to suppress opposition voices. This incident underscores the broader issue of digital privacy and security in environments where political tensions are high.

Oct 19, 2026