CriticalCVE-2026-20127 6 Hunt LeadsRemote AttackerVolt TyphoonUAT-11473KeyDriftPolyFlameLittleFilchLumen Black Lotus Labs
Volt Typhoon’s ‘Silent Train’ Rode Four Zero-Days Into Network Control
Lumen ties Volt Typhoon's Silent Train covert network to zero-days in N-able, Cisco SD-WAN, VeloCloud and likely Quest KACE, while Cisco Talos details KeyDrift malware stealing SD-WAN keys.