Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access

Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NAT) connection state to hijack active TCP sessions, spoof DNS responses, disclosโ€ฆ. The NatJack attack class highlights a novel vulnerability in network infrastructure, specifically targeting the manipulation of Network Address Translation (NAT) states.

https://meta-news.info/vโ€ฆ