New Blast-RADIUS attack exploits 30-year-old protocol vulnerability

A new Blast-RADIUS attack exploits the 30-year-old RADIUS protocol's use of MD5 for authentication, affecting networks worldwide. RADIUS is crucial for VPNs, ISPs, Wi-Fi, cellular roaming, and more. Despite MD5's known vulnerabilities since 2004, RADIUS has not been updated. The attack allows adversaries to gain administrator access to devices. Security bulletins from 90 vendors are being issued with patches and long-term solutions in progress.