Tag
3 results in the archive.
Talos identified UAT-11473 exploiting an authentication bypass in Cisco SD-WAN Catalyst Controllers to deploy KeyDrift malware, posing a significant threat to enterprise SD-WAN environments.
APT group UAT-11985 uses fake event invites in spear phishing attacks against Taiwan research targets to deploy an adversary-in-the-middle phishing framework targeting Google credentials and MFA codes.
The Chinese APT actor UAT-7810 is enhancing its ORB network via a new LONGLEASH malware targeting internet-facing networking devices, according to Cisco Talos. This campaign builds on the previously identified LapDogs ORB infrastructure active since mid-2025.