29 mins ago
Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
What's happening
SignalsMonitor is following this as a security story. BleepingComputer is the outlet attached so far. The first report grouped here was at 29 Oct 2026, 18:38 UTC. The headline in use is “Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware”. This note is SignalsMonitor's own briefing, not the publisher's article.
What we know
A newly identified advanced persistent threat (APT) group tracked as UAT-11473 was observed exploiting CVE-2026-20127, an authentication-bypass flaw in Cisco Catalyst SD-WAN Controllers, to deploy a custom malware framework called KeyDrift. [...
Story timeline
Reports grouped into this story, earliest first. Exact repeats from the same outlet are collapsed.
- First reported by BleepingComputer
Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
Reported by 1 outlet
- BleepingComputer