Malcolm Stagg

@malcolmst

Ethical hacker @synackredteam. Working on software/electronics, AI and robotics projects @sodium_24. Former @DARPA challenge competitor. Opinions are my own.

Keller, TX

Joined June 2009

Malcolm Stagg
@malcolmst
27m
Microsoft patched and published CVE-2026-56179 which relates to NatJack today, affecting Hyper-V in an upstream spoofing configuration. I have updated natjack.io with the CVE. Thank you @msftsecresponse for your work mitigating this! msrc.microsoft.com/update-guide/v… #natjack
Malcolm Stagg
@malcolmst
Aug 7
Great to see these proactive mitigations @geteero 👍
Protecting eero customers from NatJack
From eero.com
Malcolm Stagg
@malcolmst
Jul 16
Although I don’t fully agree with implied attack preconditions and severity, I appreciate @msftsecresponse work to patch and publish CVE-2026-56181 yesterday! msrc.microsoft.com/update-guide/v…
Malcolm Stagg
@malcolmst
Jul 9
Responses from several VDPs on this vulnerability class make me wonder if public disclosure is generally a better approach. It seems a number one vendor priority right now is finding ways to dismiss issues and avoid paying, or reducing severity rating, putting customers at risk.
Malcolm Stagg
@malcolmst
Jun 19
I’m excited to be presenting at Black Hat USA this year! My presentation is titled “Breaking Trust Boundaries: Exploiting Design Assumptions in Network Infrastructure” blackhat.com/us-26/briefing…