Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access

The Hacker News 7 August 2026, 11:52 EEST Security Domains

Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NAT) connection state to hijack active TCP sessions, spoof DNS responses, disclose victim IP addresses and mapped ports, and exhaust NAT tables. Presented at Black Hat USA 2026, Stagg said the techniques were demonstrated across network infrastructure devices…

Read the full story on The Hacker News https://thehackernews.com/2026/08/malware-can-abuse-windows-hello-for.html

An expired domain or a forgotten certificate takes a site down just as effectively as an attack. At CrockyHost hosting renewals and SSL are handled for you.

Keep reading

New Evooo1Bot Linux botnet turns routers into traffic relay nodes BleepingComputer
Hackers arrested over €30M bank fraud exploiting service provider flaw BleepingComputer
Hackers exploit macOS Screen Sharing flaw to deploy Monero miner BleepingComputer
The Modern Attack Chain: Rethinking Google Workspace Security in the Age of AI BleepingComputer