Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
The APT group UAT-11473 has been identified exploiting CVE-2026-20127. This vulnerability affects Cisco Catalyst SD-WAN Controllers and allows the deployment of a custom malware framework known as KeyDrift.
Key points
- APT group UAT-11473 is responsible for the attacks
- Exploits authentication-bypass flaw CVE-2026-20127
- Targets Cisco Catalyst SD-WAN Controllers
- Deploys custom KeyDrift malware framework
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. BleepingComputer did the reporting; read the original for the full story.
Read the full story at BleepingComputer
