Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys

Hackers exploited a critical Cisco Catalyst SD-WAN flaw, fixed in February, to plant custom malware inside the systems that control an organisation’s SD-WAN network, Cisco Talos said on October 28. The malware, called KeyDrift, is designed to copy the keys that encrypt traffic between sites and store them for later use; Talos calls the attacks historical but does not specify when they took place.