CVE-2026-63913

• New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables

  New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NAT) connection state to hijack active TCP sessions, spoof DNS respons

• Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access

  Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NAT) connection state to hijack active TCP sessions, spoof DNS respons

• ⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors

  ⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors A lot of security problems still begin with someone doing a completely normal thing. Cloning a repo. Answering a call. Leaving a box exposed. Trusting the default. That pretty much cove

• Black Hat USA 2026 – Summary of Vendor Announcements (Part 4)

  Black Hat USA 2026 – Summary of Vendor Announcements (Part 4) Companies are showcasing their products and services this week at the 2026 edition of the Black Hat conference in Las Vegas. The post Black Hat USA 2026 – Summary of Vendor Announcements (Part 4) appeared first on Sec

All reports →