Hackers exploit Cisco flaws to steal encryption keys and crash firewalls

A group tracked as UAT-11473 used an SD-WAN flaw to install KeyDrift, malware built to copy the keys that encrypt traffic between sites, Cisco's Talos researchers said.

Severity score

10.0 out of 10 (CVSS)

The SD-WAN flaw, which Cisco fixed in February, carries the top severity score.

Cisco also patched a firewall flaw that lets attackers crash VPN devices, and says it is being exploited.