Broadcom Wi-Fi Forever Day

A newly disclosed Broadcom WPS flaw can let nearby attackers run code as root without the Wi-Fi password; no CVE or active exploitation has been reported, and defenders should identify affected routers and replace older unfixable models.