New Wi-Fi Vulnerability Enables Network Eavesdropping via Downgrade Attacks

Researchers disclosed the SSID Confusion vulnerability (CVE-2023-52424), a design flaw in the IEEE 802.11 Wi‑Fi standard that enables attackers to spoof trusted SSIDs and force victims to connect to rogue networks, allowing traffic interception and potential disabling of VPN protections; the issue affects all OSes and Wi‑Fi clients and can be mitigated by binding SSIDs into authentication (e.g., 4‑way handshake changes), protecting beacon frames, and avoiding credential reuse across SSIDs.