Inside Key Drift: Analyzing historical UAT-11473 activity on Cisco SD-WAN
Talos has identified UAT-11473, a highly sophisticated APT, who exploited CVE-2026-20127, an authentication bypass vulnerability in Cisco SD-WAN Catalyst Controller instances to bypass authentication and gain unauthorized access to affected systems to deploy KeyDrift.
Read the original at Cisco Talos ↗
- Topics
- Data Breaches
- Mentions
- CVE-2026-20127
- Related
- CVE-2026-20127: Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability Known Exploited Vulnerabilities · Feb 25, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026Screen Connect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients Cyber Risks · Nov 12, 2026