#KeyDrift

Hackers Exploit Cisco SD-WAN Flaw to Deploy Custom KeyDrift Malware

A newly tracked APT group, UAT-11473, is exploiting the CVE-2026-20127 authentication-bypass flaw in Cisco SD-WAN Controllers to deploy the KeyDrift malware.