importantSYS.SOURCE: The Hacker News• 2026-08-07T15:02:57+05:30

NatJack Attack Exploits NAT Table Manipulation to Hijack TCP Sessions and Spoof DNS

#vulnerability #nat #dns #tcp

NatJack is a new attack that exploits vulnerabilities in NAT table manipulation to hijack TCP sessions and spoof DNS responses, affecting Windows and Linux systems. It highlights the need for network segmentation, encryption, and applying patches for CVE-2026-56181 and CVE-2026-63913.

Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NAT) connection state to hijack active TCP sessions, spoof DNS responses, expose mapped ports, and exhaust NAT tables.

Presented at Black Hat USA 2026, the research found affected behavior across independently developed implementations, including Windows and

Read original article

*** END OF TRANSMISSION ***

> NEW MEXICO COURT ORDERS META TO PAY $567M IN CHILD SAFETY VIOLATION CASE > THE MISCONCEPTION OF TIME IN CLIMATE ACTION AND ITS IMPLICATIONS > MICROSOFT 365 AITM PHISHING CAMPAIGN TARGETS PAYROLL AND FINANCE EMAILS > US GOVERNMENT PAYS RWE $1.2B TO ABANDON OFFSHORE WIND PROJECTS UNDER TRUMP ADMINISTRATION > AI-ASSISTED HTTP TERMINATOR DISCOVERS NEW HTTP DESYNCHRONIZATION TECHNIQUES AND APACHE ZERO-DAY VULNERABILITY > NATJACK ATTACK EXPLOITS NAT TABLE MANIPULATION TO HIJACK TCP SESSIONS AND SPOOF DNS > MALWARE EXPLOITS WINDOWS HELLO FOR BUSINESS FOR PERSISTENT ENTRA ID ACCESS > VULNERABILITIES IN CLAUDE CODE AND GEMINI CLI ALLOW UNAUTHORIZED ACCESS TO CI SECRETS VIA GITHUB ISSUES > TEAMPCP'S LONG-TERM REDIS ATTACKS AND SUPPLY CHAIN CAMPAIGNS TRACED BACK TO 2020 > SUCCESSFUL COMPILATION OF NETSCAPE 3.0.2 ON 64-BIT DEBIAN SYSTEM> NEW MEXICO COURT ORDERS META TO PAY $567M IN CHILD SAFETY VIOLATION CASE > THE MISCONCEPTION OF TIME IN CLIMATE ACTION AND ITS IMPLICATIONS > MICROSOFT 365 AITM PHISHING CAMPAIGN TARGETS PAYROLL AND FINANCE EMAILS > US GOVERNMENT PAYS RWE $1.2B TO ABANDON OFFSHORE WIND PROJECTS UNDER TRUMP ADMINISTRATION > AI-ASSISTED HTTP TERMINATOR DISCOVERS NEW HTTP DESYNCHRONIZATION TECHNIQUES AND APACHE ZERO-DAY VULNERABILITY > NATJACK ATTACK EXPLOITS NAT TABLE MANIPULATION TO HIJACK TCP SESSIONS AND SPOOF DNS > MALWARE EXPLOITS WINDOWS HELLO FOR BUSINESS FOR PERSISTENT ENTRA ID ACCESS > VULNERABILITIES IN CLAUDE CODE AND GEMINI CLI ALLOW UNAUTHORIZED ACCESS TO CI SECRETS VIA GITHUB ISSUES > TEAMPCP'S LONG-TERM REDIS ATTACKS AND SUPPLY CHAIN CAMPAIGNS TRACED BACK TO 2020 > SUCCESSFUL COMPILATION OF NETSCAPE 3.0.2 ON 64-BIT DEBIAN SYSTEM