How Attack Stacking Works, and What Changed