Ethical hacker @synackredteam. Working on software/electronics, AI and robotics projects @sodium_24. Former @DARPA challenge competitor. Opinions are my own.
Keller, TX
Joined June 2009
- Tweets185
- Following253
- Followers504
- Likes2.4K
Malcolm Stagg retweeted
🚨 Another system behind the same NAT could hijack your connection.
New NatJack attacks can redirect live TCP sessions, spoof DNS replies, expose victim IPs/ports, or cause DoS. The researcher tested 32 products/configs across 13 vendors; Windows and Linux flaws now have CVEs.
How the attack works: thehackernews.com/2026/08/ne…
Malcolm Stagg retweeted
Happening NOW at #BlackHatUSA! @SynackRedTeam Researcher @malcolmst is revealing NatJack, a newly developed network address translation (NAT) table manipulation attack class effective against most virtual and physical network infrastructure performing NAT.
Learn more about the new attack class here: hubs.ly/Q04s8ttV0
Malcolm Stagg retweeted
NatJack attack class exposes design flaw across decades of network infrastructure. #blackhat
“A lot of networks are vulnerable to this, and you can’t always rely on the layer two isolations that are in place.."
networkworld.com/article/420…
Malcolm Stagg retweeted
(CVE-2024-0333)[1513379][Extensions][Updater ][crx_file]CRX3 File Signature Verification Bypass via Embedded ZIP64 Payload is now open with a PoCs.
issues.chromium.org/issues/4…
[1513379][crx_file]CVE-2024-0333: Insufficient data validation in Extensions
Error early for CRXs with ZIP markers in header.
chromium-review.googlesource…
@malcolmst
Malcolm Stagg retweeted
As we prepare for the holidays, we’re counting down our most popular stories of 2022, starting with “How I hacked my way to the top of DARPA’s hardware bug bounty” by @malcolmst (with art by Si Weon Kim) from January: readme.security/how-i-hacked…
Malcolm Stagg retweeted
ICYMI: A DARPA-backed bug bounty challenged >500 top security researchers to find vulnerabilities in ultra-secure computing hardware prototypes. @malcolmst was one of the few hackers to succeed: readme.security/how-i-hacked…
Malcolm Stagg retweeted
Check out this deep dive from @malcolmst on how he #hacked secure hardware prototypes as part of the @DARPA FETT #BugBounty. It's chock-full of good tips and tricks. readme.security/how-i-hacked…
Malcolm Stagg retweeted
My first weekly #cybersecurity newsletter just went out! Read about how security researcher @malcolmst conquered some "unhackable" hardware prototypes under a @DARPA bug bounty program✍️🏻 readme.security/darpas-quest…
Malcolm Stagg retweeted
Security researcher @malcolmst went from #hacking Blu-ray players in college to taking on some of the most secure hardware prototypes ever developed. Read about how he did it: readme.security/how-i-hacked…
Malcolm Stagg retweeted
This is happening now! Check it out live here: subtchallenge.com/SubTv.html
DARPA challenges are about jumpstarting the future, and today we caught glimpses of a time not too far away in which we won't always have to send first responders into harm’s way. Check out the SubT Prize Round Coverage starting tomorrow at 9:30am EDT: subtchallenge.com/SubTv.html
Malcolm Stagg retweeted
Tune in today from 2:00pm - 4:00pm EDT to see coverage of the DARPA SubT Challenge Virtual prize round and Systems preliminary round. subtchallenge.com/SubTv.html #robots #SubTChallenge
Malcolm Stagg retweeted
Watching coverage of @DARPA #SubTChallenge virtual final event from Louisville, KY!
Malcolm Stagg retweeted
Microsoft released August security updates to address 44 common vulnerabilities and exposures (CVEs) in various Microsoft software products. redmondmag.com/articles/2021… #PatchTuesday
Malcolm Stagg retweeted
It's Patch Tuesday, which mean #Adobe and #Microsoft have released their latest security updates. It's a smaller release, but @dustin_childs goes through the details that matter. Read all about it at zerodayinitiative.com/blog/2…
Malcolm Stagg retweeted
Significant RDP vuln in this month’s Microsoft Patch Tuesday. While this may not be the next BlueKeep, we have some details and insights to help you stay safe! @w3knight
mcafee.com/blogs/enterprise/… #atr
Malcolm Stagg retweeted
We were proud to partner w/@DARPA & @DefenseDigital to strengthen SSITH Hardware Defenses: "More than 980 SSITH processors were tested by Synack’s existing community of researchers and 10 valid vulnerabilities were discovered across all of the secure architecture implementations"
Under FETT - our first bug bounty & part of @DefenseDigital Hack the Pentagon - 13K hours of hacking by +580 cybersecurity pros from @synack proved the value of secure hardware architectures developed on our SSITH program. darpa.mil/news-events/2020-0…
Malcolm Stagg retweeted
Really exciting to see the #SubTChallenge cave circuit event! Wish my robots could have scored those 4 extra points, but it was great to see them explore and perform some interesting maneuvers. Thanks @DARPA for the hard work putting this together, and for the superlative award!
Malcolm Stagg retweeted
Though we cannot fill the void left by those lost, their memory inspires us every day to bolster our efforts to keep our country and fellow citizens safe and secure. #NeverForget
