Security News Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware BleepingComputer Daniel Bender 29 Oct 2026 Share A newly identified advanced persistent threat (APT) group tracked as UAT-11473 was observed exploiting CVE-2026-20127, an authentication-bypass flaw in Cisco Catalyst SD-WAN Controllers, to deploy a custom malware framework called KeyDrift.
