vulnerability
Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN
CriticalCVSS 10.0KEVEPSS 89%
Summary
Cisco Talos has identified a sophisticated APT group, UAT-11473, leveraging a vulnerability (CVE-2026-20127) in Cisco SD-WAN Catalyst Controller instances to install a custom malware framework called ‘KeyDrift’. Cisco recommends applying patches and monitoring for post-compromise activity.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data