CRITICALMalware
Global

Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys

·Source: The Hacker News

Updated:

Executive Summary

Hackers exploited a critical Cisco Catalyst SD-WAN flaw, fixed in February, to plant custom malware inside the systems that control an organization's SD-WAN network. The malware, called KeyDrift, is designed to copy the keys that encrypt traffic between sites and store them for later use, Cisco Talos said on October 28. Talos calls the attacks historical but does not specify when they

Analysis

Hackers exploited a critical Cisco Catalyst SD-WAN flaw, fixed in February, to plant custom malware inside the systems that control an organization's SD-WAN network. The malware, called KeyDrift, is designed to copy the keys that encrypt traffic between sites and store them for later use, Cisco Talos said on October 28. Talos calls the attacks historical but does not specify when they
Source Attribution

Originally published by The Hacker News on Oct 29, 2026.

Related Threats

MEDIUMMalwareNEW

Australia severs criminal access to 180,000 computers after breaching Amadey malware backend

Lukas Brandt writes: Criminals using the Amadey malware lost control of about 180,000 infected computers after operators from the Australian Signals Directorate (ASD) gained access to the operation’s backend and severed the connection between the controllers and the victims. “The next steps that we took were to disconnect that Amadey controller from all those victims,”...

DataBreaches.net
CRITICALMalware

ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories

Some attacks take real skill. Others just need someone to leave a door open. This week has both. Exposed passwords, old bugs still getting exploited, and trusted software doing things it shouldn't. There's a strange mix of clever tricks and careless mistakes. Hackers are borrowing trust from familiar apps, websites, and AI tools. Some are using AI to speed things up. Others are leaving their

The Hacker News
HIGHMalware

NIK C2: The new AI-enabled command-and-control framework

Cisco Talos observed a new AI-integrated command-and-control (C2) framework in the wild called “NIK C2.”

Cisco Talos