While we've heard no reports of this vulnerability actually being exploited, you certainly don't want to take the risk that it might be.
F8660_fbz_button[disabled=disabled], .ezoic-wrapper . F8660_fbz_button[type="button"]:disabled, .ezoic-wrapper . F8660_fbz_button[type="button"]:disabled:focus, .ezoic-wrapper . F8660_fbz_button[disabled]:disabled, .ezoic-wrapper .
Apple has released firmware updates for the current Air Port Extreme and Air Port Time Capsule base stations with 802.11ac Wi-Fi (these tower-like models receive Firmware Update 7.7.9), as well as older Air Port Express, Air Port Extreme, and Air Port Time Capsule models with 802.11n Wi-Fi (Firmware Update 7.6.9).
After that, just fire up your Air Port Utility for i OS, OS X or Windows.
(If you're not sure where it is, just do a search for "airport utility" to find it.) The app will check for updates automatically when opened and will tell you if any of your devices have an update available.
Both updates patch the KRACK exploits (see “Wi-Fi Security Flaw Not As Bad As It’s KRACKed Up To Be,” 17 October 2017), improving the handling of state transitions to prevent reusing a nonce (aka, Number ONCE, an arbitrary number that can only be used once) in WPA multicast/GTK clients.
Update 7.7.9 also addresses a memory corruption issue that enabled an attacker within range to execute arbitrary code on the Wi-Fi chip.If that sounds like gibberish to you, that's okay: the vague description of the problem even leaves experts guessing as to what the security issue was.However, antivirus maker Sophos speculates this could have allowed hackers to get into your network if you visited even an innocuous looking website—without even clicking anything on the page—by directing your browser to a "booby trapped" domain.This has effectively caused these Apple routers to no longer support sending updates to Dyn Standard DNS.If you are attempting to set up earlier versions of the Airport Utility and firmware, you can use these instructions, but this is an experimental feature, we cannot provide technical support for this setup.First, let’s make sure you have all of the requirements for dynamic DNS in the Air Port in place: Note on Apple Bonjour: If you’re looking to make Wide Area Bonjour, DNS Service Discovery, and NAT-PMP work with Dyn, you may be interested in this article instead.