Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys

Hackers exploited a critical Cisco Catalyst SD-WAN flaw, patched in February, to plant custom malware named KeyDrift inside systems managing SD-WAN networks. The malware is designed to steal encryption keys that protect traffic between sites and store them for later use, said Cisco Talos on October 28. Talos calls the attacks historical, but did not specify timing.