August 2026

18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers 2026-08-07 at 14:10 By A use-after-free bug in Linux’s SCTP networking code can be turned into full root on a host, and Tencent researchers say they used it to escape a container and reach the machine underneath. The flaw has existed since […]

Tish James, Kathy Hochul’s pursuit of Kalshi raises questions about why they’re ignoring Polymarket 2026-08-07 at 14:00 By Charles Gasparino Kalshi argues the suit is a death blow to its business. This article is an excerpt from Latest Technology News | New York Post View Original Source

I tested the new Samsung Galaxy Watch9: The health tracker’s most exciting features 2026-08-07 at 12:59 By Carly Stern The new watch, on sale today, tracks fitness and sleep, measures antioxidants in the skin, and an even do a body composition scan. This article is an excerpt from Latest Technology News | New York Post

New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables 2026-08-07 at 12:32 By Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NAT) connection state to hijack active TCP sessions, spoof DNS responses, expose mapped ports, and exhaust NAT tables. Presented at Black Hat USA

Stop, Drop, and Roll 2026-08-07 at 12:00 By Insights from national fire prevention standards for active shooter prevention. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access 2026-08-07 at 11:52 By Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NAT) connection state to hijack active TCP sessions, spoof DNS responses, disclose victim IP addresses and mapped ports, and exhaust NAT tables. Presented

Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets 2026-08-07 at 11:18 By A GitHub issue opened by an account with no repository privileges was enough to execute code on the CI runners behind Anthropic’s and Google’s own coding-agent repositories. On OpenAI’s, it was enough to hijack the next agent

TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign 2026-08-07 at 09:50 By A new analysis has uncovered that the threat actor tracked as TeamPCP has been active on the cybercrime scene as far back as 2020, indicating the group has been compromising internet-facing infrastructure for years before training their