Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN

· Blog Talosintelligence · Oct. 28, 2026, 9:53 p.m.
Threat Advisory APT malware Cisco Talos Web Filtering Cybersecurity APT Cisco SD-WAN CVE-2026-20127
Summary
This blog post discusses the identification of the APT UAT-11473 by Talos, focusing on how it exploited an authentication bypass vulnerability in Cisco SD-WAN systems to perform unauthorized access and deployment of KeyDrift malware.
Read full post on blog.talosintelligence.com →
AUTHOR
Advertise
Sponsor diff.blog
Put your product in front of developers who read and write about their craft. One exclusive sponsor at a time.
Become a sponsor →