New Attack Could Let Remote Hackers Target Devices On Internal Networks
New Attack Could Let Remote Hackers Target Devices On Internal Networks A newly devised variant of the NAT Slipstreaming attack can be leveraged to compromise and expose any device in an internal network, according to the latest research. Detailed by enterprise IoT security firm Armis, the new attack (CVE-2020-16043 and CVE-2021-23961) builds on the previously disclosed technique to bypass routers and firewalls and reach any unmanaged device within the internal network from the Internet. First disclosed by security researcher Samy Kamkar in late October 2020, the JavaScript-based attack relie...
Source: thehackernews.com
