Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys

Cisco Talos disclosed historical attacks where a critical flaw in Cisco Catalyst SD-WAN was exploited to deploy custom malware named KeyDrift. The malware is engineered to harvest and exfiltrate cryptographic keys used for securing site-to-site network traffic.