negativeSYS.SOURCE: The Hacker News• 2026-10-29T13:54:22+05:30

Cisco SD-WAN Vulnerability Exploited by Hackers to Deploy KeyDrift Malware for Encryption Key Theft

#vulnerability #malware #encryption

Hackers exploited a fixed Cisco SD-WAN vulnerability to deploy KeyDrift malware, which steals encryption keys from SD-WAN networks. The attack highlights ongoing risks from unpatched systems and sophisticated threat actors targeting network infrastructure.

Hackers exploited a critical Cisco Catalyst SD-WAN flaw, fixed in February, to plant custom malware inside the systems that control an organization's SD-WAN network.

The malware, called KeyDrift, is designed to copy the keys that encrypt traffic between sites and store them for later use, Cisco Talos said on October 28. Talos calls the attacks historical but does not specify when they

Read original article

*** END OF TRANSMISSION ***

> US BATTERY STORAGE CAPACITY SURPASSES 20.2 GWH IN Q2 2026, SETTING NEW RECORD > CISCO ADDRESSES ACTIVELY EXPLOITED VULNERABILITY IN ASA AND FTD VPN SOFTWARE > GITHUB INTRODUCES NPM PACKAGE FIREWALL FOR REAL-TIME MALICIOUS ACTIVITY DETECTION > CRITICAL GITLAB VULNERABILITY CVE-2026-97229 EXPLOIT ATTEMPTED ON ALPINE LINUX'S SERVER > SPAIN HIGH-SPEED TRAIN COLLISION RESULTS IN DOZENS OF FATALITIES > CISCO SD-WAN VULNERABILITY EXPLOITED BY HACKERS TO DEPLOY KEYDRIFT MALWARE FOR ENCRYPTION KEY THEFT > CUBA EXTENDS DAYLIGHT SAVING TIME UNTIL 2027, SKIPPING 2026 CLOCK ADJUSTMENT > ZERO-CLICK REMOTE DOS VULNERABILITY IN ANDROID TELEPHONY VIA MALFORMED WAP PUSH SMS > EXPLOITING LOGIC BUGS TO CREATE A MICROSOFT EDGE FULL CHAIN ESCAPE > CHINA-NEXUS THREAT ACTOR EXPLOITS VMWARE ESX ZERO-DAY VULNERABILITY TO EVASION AUDIT TRAILS> US BATTERY STORAGE CAPACITY SURPASSES 20.2 GWH IN Q2 2026, SETTING NEW RECORD > CISCO ADDRESSES ACTIVELY EXPLOITED VULNERABILITY IN ASA AND FTD VPN SOFTWARE > GITHUB INTRODUCES NPM PACKAGE FIREWALL FOR REAL-TIME MALICIOUS ACTIVITY DETECTION > CRITICAL GITLAB VULNERABILITY CVE-2026-97229 EXPLOIT ATTEMPTED ON ALPINE LINUX'S SERVER > SPAIN HIGH-SPEED TRAIN COLLISION RESULTS IN DOZENS OF FATALITIES > CISCO SD-WAN VULNERABILITY EXPLOITED BY HACKERS TO DEPLOY KEYDRIFT MALWARE FOR ENCRYPTION KEY THEFT > CUBA EXTENDS DAYLIGHT SAVING TIME UNTIL 2027, SKIPPING 2026 CLOCK ADJUSTMENT > ZERO-CLICK REMOTE DOS VULNERABILITY IN ANDROID TELEPHONY VIA MALFORMED WAP PUSH SMS > EXPLOITING LOGIC BUGS TO CREATE A MICROSOFT EDGE FULL CHAIN ESCAPE > CHINA-NEXUS THREAT ACTOR EXPLOITS VMWARE ESX ZERO-DAY VULNERABILITY TO EVASION AUDIT TRAILS