Skip to page content

AEGLIX MIND

Intelligence for Africa and the Gulf

AEGLIX news · Global

Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware

BleepingComputer · Bill Toulas

Published by the source: Thu, 29 Oct 2026 14:38:26 -0400

From BleepingComputer

A newly identified advanced persistent threat (APT) group tracked as UAT-11473 was observed exploiting CVE-2026-20127, an authentication-bypass flaw in Cisco Catalyst SD-WAN Controllers, to deploy a custom malware framework called KeyDrift. [...]

Publisher-provided RSS excerpt. This is not the full article or an independently verified AEGLIX assessment.

Read the full story at BleepingComputer ↗ (opens in a new tab)

Explore the story

The complete reporting, updates, and supporting evidence remain with the original publisher. Check the publication date and source before acting on a headline.

These are research tools; no CVE, indicator, or campaign relationship is inferred from this article.

More from BleepingComputer

← Back to security news