topic Re: TLS/SSL Stripping Risk in Broadband

TLS/SSL Stripping Risk

RedK84 — Sat, 17 Jan 2026 13:42:16 GMT

My antivirus network inspector is showing that my sky broadband is at risk from a "man in the middle" - TLS/SSL attack and that the best fix is a firmware upgrade - I cant get anywhere with an assistant on resolving this problem - how do I fix this threat as it makes any device wiuthout a VPN unusable

Re: TLS/SSL Stripping Risk

TimmyBGood — Sat, 17 Jan 2026 16:13:37 GMT

@RedK84 wrote:

My antivirus network inspector is showing that my sky broadband is at risk from a "man in the middle" - TLS/SSL attack

You're the second person to report this recently, but it's perhaps worth noting that AV products can tend to seriously overstate such risks in order to justify their own existence.

and that the best fix is a firmware upgrade - I cant get anywhere with an assistant on resolving this problem -

For any current* Hub model, updates are pushed out by Sky: there aren't any user-applied downloads.

how do I fix this threat as it makes any device wiuthout a VPN unusable

That's extremely unlikely unless you've seriously upset a hostile state security agency or similar adversary: for such a vulnerability to be exploited the attacker needs to be either in wireless range (and convince you to join a bogus WiFi network) or actually within your own cabled network perimeter.

* In-support models are the Sky Broadband Hub, Max Hub and Gigafast+ Hub.

Theoretically the Q Hub has just gone out of support.

Re: TLS/SSL Stripping Risk

TimmyBGood — Sat, 17 Jan 2026 14:52:16 GMT

@RedK84 wrote:

My antivirus network inspector is showing that my sky broadband is at risk

Which AV product is this? It helps to know, so that Sky has the option to liaise with the company which produces it.

Re: TLS/SSL Stripping Risk

RedK84 — Sun, 18 Jan 2026 16:27:13 GMT

Hi,

Thank you - this is really helpful

It's AVG though a guest uses Nord and it flagged on their mobile too.

On my desktop Antivirus things are appearing OK but I am now quite nervous that this is more than a false positive on a mobile app

Cheers

Steve

Re: TLS/SSL Stripping Risk

Stacks02 — Tue, 20 Jan 2026 08:34:48 GMT

Hello,

I have received the sane notification via my AVG wi-fi scan.

I am less concerned now that this is being reported elsewhere.

Hacking

Hayley1614 — Tue, 20 Jan 2026 09:35:09 GMT

My avg saying that theres a man in the middle on my Internet plus I've just gone onto pay for something and comes up with malicious site but it not sone one trying to hack in

Re: Hacking

Sharcuk — Tue, 20 Jan 2026 10:37:45 GMT

@Hayley1614 There was a forum post last week on the same subject, I don't know if it helps!

https://helpforum.sky.com/t5/Broadband/TLS-SSL-Stripping-Risk/td-p/5192792

Re: Hacking

TimmyBGood — Tue, 20 Jan 2026 11:35:49 GMT

@Hayley1614 wrote:
My avg saying that theres a man in the middle on my Internet

Perhaps worth noting that 'at risk' is very different to there actually being a hostile action in progress.