🧰 Cisco Talos

The items that name it 11

• Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
  articleas tools2026-10-29

  Threat research group that reported on UAT-11473 activity and KeyDrift, assessing with high confidence it is built for persistent access and key exfiltration.

• A quiet week in infosec <.<
  articleas classification.key entities2026-10-29
• Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network
  articleas classification.key entities2026-10-29
• CVE-2026-109618 / CVE-2026-109619 | NodeZero Rapid Response Check Now Available
  advisoryas classification.key entities2026-10-23
• Compromised eMudhra intermediate certificates
  advisoryas classification.key entities2026-10-21
• Two critical RCEs in PHP core
  advisoryas classification.key entities2026-10-21
• There's only so much code: the rise in vulnerability numbers
  articleas classification.key entities2026-10-20
• [tl;dr sec] #350 - Reverse Engineer Anything, Tracking AI-integrated Malware, Test-driving Jev
  articleas classification.key entities2026-10-15
• Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations
  articleas classification.key entities2026-10-14
• Threat Actors Achieve Persistence After SQL Injection
  writeupas classification.key entities2026-07-13
• Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign
  articleas tools

  Security research team that discovered and tracked the Antino backdoor and UAT-11587 cluster, published the analysis cited in this article (researcher Ashley Shen).