CERT24Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption KeysLoading data…
CERT24Threat Observatory
Period

Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys

Hackers exploited the critical Cisco Catalyst SD-WAN vulnerability CVE-2026-20127 to plant custom malware called KeyDrift in systems that control an organization's SD-WAN network. Cisco Talos said the malware is designed to copy AES keys used to encrypt traffic between sites and store them for later use.

← Back to intelligence

Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys

Hackers exploited the critical Cisco Catalyst SD-WAN vulnerability CVE-2026-20127 to plant custom malware called KeyDrift in systems that control an organization's SD-WAN network. Cisco Talos said the malware is designed to copy AES keys used to encrypt traffic between sites and store them for later use.