News Vulnerabilities & Zero-Days
KeyDrift: Hackers Tied to Volt Typhoon's Network Stole Encryption Keys From Cisco SD-WAN Controllers via CVSS 10 Flaw
Cisco Talos says threat actor UAT-11473 exploited critical Cisco Catalyst SD-WAN flaw CVE-2026-20127 and planted KeyDrift malware to steal data-plane encryption keys. Talos assesses with high confidence that the attackers' infrastructure overlaps with Volt Typhoon's Silent Train relay network, which Lumen has now detailed.
Jay B.