New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables
Article summary
Quick briefing — cleaned from the original RSS feed
Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NAT) connection state to hijack active TCP sessions, spoof DNS responses, expose mapped ports, and exhaust NAT tables. Presented at Black Hat USA 2026, the research found affected behavior across independently developed implementations, including Windows and
1Key Takeaways
- Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NAT) connection state to hijack active TCP sessions, spoof DNS responses, expose mapped ports, and exhaust NAT tables.
- Presented at Black Hat USA 2026, the research found affected behavior across independently developed implementations, including Windows and.
2AIWedia Score
8.4/10
High relevance — worth your attention today
Based on source trust, recency, category impact, and story depth.
3Why it matters
Tool launches and updates shape which workflows teams adopt and which vendors gain traction. The Hacker News reports that security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NAT) connection state to hijack active TCP sessions, spoof DNS responses, expose mapped ports, and exhaust NAT tables.
Explore related
Browse toolsRelated tools
AI Tools news
Explore curated ai tools tools on AIWedia — compare, rank, and launch from our directory.
Full story on The Hacker News
Read full articleHeadlines aggregated via RSS for discovery on AIWedia. Original content © The Hacker News. We link to the source and do not republish full articles.