CERT24Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption KeysLoading data…
CERT24Threat Observatory
Period

Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys

Attackers exploited the critical Cisco Catalyst SD-WAN vulnerability CVE-2026-20127 to plant KeyDrift malware in SD-WAN control systems. According to Cisco Talos, the malware is designed to copy keys that encrypt traffic and retain them for later use.

← Back to intelligence

Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys

Attackers exploited the critical Cisco Catalyst SD-WAN vulnerability CVE-2026-20127 to plant KeyDrift malware in SD-WAN control systems. According to Cisco Talos, the malware is designed to copy keys that encrypt traffic and retain them for later use.