NatJack research presented at Black Hat USA 2026 found exploitable behavior in all 32 tested NAT products and configurations, spanning Windows, Linux, and macOS. The attack class can hijack active connections, poison DNS responses, or disable connectivity without requiring IP spoofing or Layer 2 access.

Source

Microsoft Edge will change how it detects a device’s local IP address when Proxy Auto-Config (PAC) scripts are in use. The September 2026 update will align Edge with Chromium while adding IPv4 and IPv6 policies that let administrators override the probe destinations.

Source

Palo Alto Networks says its NOVA AI engine found 14,090 previously unreported vulnerabilities across 3,915 open-source projects in about two months. At Black Hat, the company paired those findings with PAN-OS 12.2 Ceres, which provides network-level virtual patches within hours—before vendors release code fixes.

Source

The FCC is preparing a rule that could block new Chinese-made optical transceivers from entering the United States, potentially reshaping the hardware supply chain behind AI data centers. Officials reportedly want the restriction published before the end of 2026, but it could still be changed or abandoned.

Source

Microsoft’s July 2026 Windows updates add passkeys as the default phishing-resistant authentication method in Microsoft Entra ID, free Arc-enabled hotpatching for Windows Server 2025, and more resilient remote desktop networking. The optional Windows 11 preview also improves virtualization networking, Secure Boot certificate deployment, Voice Access, Widgets, and peripheral fingerprint sign-in.

Source

Microsoft has attributed the global CaptiveCrunch hotel Wi-Fi campaign to Russia-linked Midnight Blizzard and identified custom malware used to target Microsoft 365 accounts. The operation combines captive-portal hijacking, device-code phishing, and fake Windows updates to steal tokens or establish persistent access on travelers’ devices.

Source

Intel has released Wi-Fi driver package 24.60.0 for Windows 10 64-bit and Windows 11, bringing wireless stability and functionality improvements without introducing a major new feature. The update also improves regional regulatory compliance across a broad range of Wi-Fi 7, Wi-Fi 6E, Wi-Fi 6, and older Intel Wireless-AC adapters.

Source

Cisco says AI agents are changing enterprise networks faster than conventional capacity planning expects. At a US Senate hearing, the company reported a fourfold increase in AI inference traffic in eight months and found that agents generated 450% more traffic than people performing the same tasks.

Source

Cloudflare’s five-day Agents Week is examining how cloud infrastructure and the web must change for autonomous software agents. The company is focusing on agent-native execution, development workflows, secure access to enterprise systems, and the interaction between agents and humans.

Source

Attackers are using compromised hotel and conference-center Wi-Fi gateways to redirect guests to fake browser or operating-system updates. The campaign delivers CornFlake, a surveillance-focused remote access trojan attributed by Microsoft to Storm-2945, a sub-cluster of Russia-linked Midnight Blizzard.

Source

Cisco will stop selling its Azure Local bundles on October 24, 2026, with final shipments due by January 24, 2027. The company is offering no direct replacement, leaving customers to assess other HCI platforms through Cisco Compute or third-party providers.

Source

Cisco Secure Firewall Management Center (FMC) is under active zero-day attack through hard-coded credentials that let unauthenticated remote attackers access a low-privilege account and sensitive data. Cisco has released hotfixes for supported FMC versions, while CISA has added CVE-2026-20316 to its Known Exploited Vulnerabilities catalog.

Source

Cisco plans to make Cloud Control available to US customers by the end of August, bringing its deep networking AI models into an agentic operations platform. The models will also be offered for on-premises deployment, while Cisco works out token-based pricing and wider regional availability.

Source