New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables

AI Summary

Researcher Malcolm Stagg presented NatJack at Black Hat USA 2026, a novel attack class that manipulates NAT connection state to hijack active TCP sessions, spoof DNS responses, expose mapped ports, and exhaust NAT tables. The techniques were demonstrated across multiple independently developed implementations including Windows, making this a systemic protocol-level concern rather than a single-vendor bug.

Read full article → https://thehackernews.com/2026/08/new-natjack-atta…

Relevance score: 82.0/100

# More from August 09

1
New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens The Hacker News
2
Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication The Hacker News
3
Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts The Hacker News
4
N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist The Hacker News
6
Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emails The Hacker News
7
Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer The Hacker News
8
TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign The Hacker News
9
North Carolina Ports confirms cyberattack disrupting operations BleepingComputer
10
Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access The Hacker News