Live Feeds
● LIVE Updated 1h ago · 18 sources tracked

Hackaday Links: August 2, 2026

Security researcher Malcolm Stagg has introduced NatJack, a new attack class that manipulates network address translation connection states to hijack TCP sessions and spoof DNS responses. The research, presented at Black Hat USA 2026, identified vulnerabilities in Windows and Linux implementations. Separately, James Kettle used an AI-assisted system called HTTP Terminator to discover new HTTP desynchronization techniques and an Apache Traffic Server zero-day. Kettle reported finding roughly 700 vulnerable targets, including government infrastructure and banks, after testing 30,000 authorized websites.

RSS Source map (18)

What changed

Researchers disclosed the NatJack attack class and AI-discovered HTTP desync techniques.

Live updates

  1. Security Researchers Reveal NatJack Attacks and AI-Driven HTTP Vulnerabilities

    Security researcher Malcolm Stagg has introduced NatJack, a new attack class that manipulates network address translation connection states to hijack TCP sessions and spoof DNS responses. The research, presented at Black Hat USA 2026, identified vulnerabilities in Windows and Linux implementations. Separately, James Kettle used an AI-assisted system called HTTP Terminator to discover new HTTP desynchronization techniques and an Apache Traffic Server zero-day. Kettle reported finding roughly 700 vulnerable targets, including government infrastructure and banks, after testing 30,000 authorized websites.

    Why it matters

    NAT manipulation allows attackers with privileged access on a shared network to compromise other systems. AI-assisted vulnerability research accelerates the discovery of complex desync vectors that humans might miss. These findings highlight systemic weaknesses in core networking protocols.

    What is confirmed

    • Malcolm Stagg presented NatJack research at Black Hat USA 2026.
    • NatJack affects Windows NAT used by Hyper-V (CVE-2026-56181) and Linux Netfilter conntrack (CVE-2026-63913).
    • James Kettle's HTTP Terminator system explored 30,000 candidate desync vectors.
    • A human-guided discovery cascade exposed a zero-day in Apache Traffic Server.

    Still unconfirmed

    • Google will showcase next-generation Pixel phones at the Made by Google 2026 event.

    What to watch next

    • Patch releases for CVE-2026-56181 and CVE-2026-63913
    • Official vulnerability disclosures from the 700 targets identified by HTTP Terminator
    Sources used for this update (9)
    1. www.ign.com — All Anime Expeditions Codes (August 2026)
    2. lifehacker.com — How to Watch Made by Google 2026: The Pixel Event's Start Time and What to Expect
    3. hackaday.com — This Filesystem Is Born To Fail
    4. thehackernews.com — New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables
    5. thehackernews.com — AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day
    6. beebom.com — Blox Fruits Private Server Links (August 2026)
    7. hackaday.com — Hackaday Links: August 9, 2026
    8. www.geekwire.com — Week in Review: Most popular stories on GeekWire for the week of Aug. 2, 2026
    9. www.coindesk.com — Crypto is going through a massive dot-com style shakeout as over 100 projects fold in 2026
    confidence 90%

  2. Security researchers reveal NatJack attacks and AI-driven HTTP desync discoveries

    Security researcher Malcolm Stagg disclosed NatJack, a new attack class that manipulates network address translation connection states to hijack TCP sessions and spoof DNS responses. The vulnerability affects Windows and Linux implementations. Separately, James Kettle used an AI-assisted system called HTTP Terminator to identify new HTTP desynchronization techniques after testing 30,000 authorized websites. This research identified roughly 700 vulnerable targets including government infrastructure and banks. Additionally, a human-guided discovery process uncovered a zero-day vulnerability in Apache Traffic Server.

    Why it matters

    These vulnerabilities target core networking protocols and server infrastructure. NatJack requires privileged access to a system sharing the same NAT as the victim. The HTTP Terminator findings highlight the ability of AI to automate the discovery of complex web vulnerabilities at scale.

    What is confirmed

    • Malcolm Stagg disclosed NatJack, an attack class that manipulates NAT connection state to hijack TCP sessions and spoof DNS responses.
    • NatJack affects Windows NAT used by Hyper-V and Linux Netfilter conntrack.
    • CVE-2026-56181 has a CVSS score of 8.3 and CVE-2026-63913 has a CVSS score of 8.2.
    • James Kettle's AI-assisted HTTP Terminator tested 30,000 authorized websites and found roughly 700 vulnerable targets.
    • A human-guided discovery cascade exposed a zero-day in Apache Traffic Server.

    What to watch next

    • Release of patches for CVE-2026-56181 and CVE-2026-63913
    • Public disclosure of the Apache Traffic Server zero-day fix
    Sources used for this update (9)
    1. www.ign.com — All Anime Expeditions Codes (August 2026)
    2. lifehacker.com — How to Watch Made by Google 2026: The Pixel Event's Start Time and What to Expect
    3. hackaday.com — This Filesystem Is Born To Fail
    4. thehackernews.com — New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables
    5. thehackernews.com — AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day
    6. beebom.com — Blox Fruits Private Server Links (August 2026)
    7. hackaday.com — Hackaday Links: August 9, 2026
    8. www.geekwire.com — Week in Review: Most popular stories on GeekWire for the week of Aug. 2, 2026
    9. www.coindesk.com — Crypto is going through a massive dot-com style shakeout as over 100 projects fold in 2026
    confidence 100%

  3. LINK Spacecraft Struggles to Stabilize for NASA Swift Mission

    The LINK spacecraft, a private mission intended to boost NASA's Swift telescope, is currently spinning out of control. Engineers are working to stabilize the vehicle, but the technical failure has delayed the rescue operation until late August. While NASA and private partners continue recovery efforts, the spacecraft remains unstable. The mission aims to prevent the Swift telescope from falling, though the current instability of the rescue craft has created a significant setback in the timeline.

    Why it matters

    The Swift telescope requires a boost to maintain its orbit and avoid falling. The LINK spacecraft was deployed as a private solution to provide this necessary propulsion. Success depends on stabilizing the rescue craft's rotation to allow for a successful docking or boost maneuver.

    What is confirmed

    • The LINK spacecraft is intended to boost NASA's Swift telescope.
    • The LINK spacecraft is currently experiencing an uncontrolled spin.
    • Engineers are attempting to stabilize the LINK spacecraft.

    Still unconfirmed

    • The rescue of NASA's Swift telescope has been delayed until late August.
    • The mission to save the telescope has suffered a setback.
    • Engineers are racing to fix the spinning spacecraft.

    What to watch next

    • Confirmation of the LINK spacecraft's stabilization.
    • The actual date of the boost attempt in late August.
    • Updates on the Swift telescope's orbital decay status.
    Sources used for this update (13)
    1. NASA Science (.gov) — Commissioning Update for Spacecraft to Boost NASA’s Swift
    2. The New York Times — Mission to Save Falling NASA Space Telescope Suffers Setback
    3. NASA Science (.gov) — Efforts Continue to Stabilize LINK Spacecraft for NASA’s Swift Boost
    4. Live Science — 'We are not giving up yet': Private mission to rescue NASA's Swift telescope is spinning out of control, and engineers are racing to fix it
    5. Ars Technica — Here's how engineers plan to save the satellite sent to save NASA's Swift mission
    6. The Register — NASA's Swift rescue slips to late August as LINK battles its spin
    7. Hackaday — Hackaday Links: August 2, 2026
    8. hackaday.com — Full Teardown Of A 2026 Amazon Fire Stick HD
    9. www.tvinsider.com — What’s New on BritBox in August 2026: Olivia Cooke’s ‘Vanity Fair,’ ‘The Hardacres’ & More
    10. ftw-eu.usatoday.com — Connections hints, clues and answers on Wednesday, August 5 2026
    11. tech.co — Best Free Cybersecurity Training Courses for August 2026
    12. tryhardguides.com — NYT Connections Answers for August 6 2026
    confidence 90%

  4. LINK Spacecraft Struggles to Stabilize for NASA Swift Rescue

    Engineers are racing to stop the LINK spacecraft from spinning out of control to prevent a mission failure. The private satellite is intended to boost NASA's Swift telescope, which is currently falling. Due to these stabilization issues, the rescue timeline has slipped to late August. NASA and private partners continue efforts to stabilize the craft and regain control of its orientation to ensure the telescope can be saved.

    Why it matters

    The Swift telescope is a critical NASA asset that requires a boost to maintain its orbit. The LINK spacecraft was launched as a private rescue mission to provide this necessary propulsion. Failure to stabilize LINK could result in the loss of the telescope.

    What is confirmed

    • The LINK spacecraft is intended to boost NASA's Swift telescope.
    • Engineers are working to stabilize the LINK spacecraft.
    • The rescue of the Swift telescope has been delayed to late August.

    Still unconfirmed

    • The LINK spacecraft is spinning out of control.
    • The Swift telescope is falling.

    What to watch next

    • Confirmation of LINK stabilization by NASA or mission partners.
    • Successful execution of the Swift boost in late August.
    • Updated technical plans for recovering the satellite's orientation.
    Sources used for this update (13)
    1. NASA Science (.gov) — Commissioning Update for Spacecraft to Boost NASA’s Swift
    2. The New York Times — Mission to Save Falling NASA Space Telescope Suffers Setback
    3. NASA Science (.gov) — Efforts Continue to Stabilize LINK Spacecraft for NASA’s Swift Boost
    4. Live Science — 'We are not giving up yet': Private mission to rescue NASA's Swift telescope is spinning out of control, and engineers are racing to fix it
    5. Ars Technica — Here's how engineers plan to save the satellite sent to save NASA's Swift mission
    6. The Register — NASA's Swift rescue slips to late August as LINK battles its spin
    7. Hackaday — Hackaday Links: August 2, 2026
    8. hackaday.com — Full Teardown Of A 2026 Amazon Fire Stick HD
    9. www.tvinsider.com — What’s New on BritBox in August 2026: Olivia Cooke’s ‘Vanity Fair,’ ‘The Hardacres’ & More
    10. ftw-eu.usatoday.com — Connections hints, clues and answers on Wednesday, August 5 2026
    11. tech.co — Best Free Cybersecurity Training Courses for August 2026
    12. tryhardguides.com — NYT Connections Answers for August 6 2026
    confidence 90%