Cisco Network Weekly News: Exploited VPN Flaw, Private BGP Visibility and AI Agent Defense

By: Network-Switch.com | November 2, 2026

Quick Summary

Cisco's news from October 26 to 31, 2026, covered several issues that network teams need to pay attention to now. The company patched an actively exploited ASA and FTD VPN vulnerability, while Cisco Talos published new findings on attacks against SD-WAN controllers. ThousandEyes also introduced a way to monitor private BGP routes from inside enterprise networks. Beyond those developments, Cisco released Project Quarry to help detect suspicious AI agent behavior, introduced Model Foundry for partners, and updated its Cisco 360 partner program. For IT teams, the immediate work is to check affected systems, verify that network controllers can still be trusted, and keep AI-driven operations under clear human and security controls.

Cisco Patches Actively Exploited ASA and FTD SSL VPN Flaw

Published: October 28, 2026.

Cisco disclosed CVE-2026-76418 on October 28, warning that attackers were already exploiting the vulnerability. Rated CVSS 8.6, the flaw affects certain Cisco Secure Firewall ASA and FTD systems where SSL remote-access VPN is accessible and secondary authentication is enabled for an affected tunnel group. An attacker does not need to log in. A specially crafted connection request can cause the firewall to reload and interrupt VPN service. Cisco has released fixed software.

Not every ASA or FTD deployment is affected. The risk depends on the software version and VPN authentication settings. Cisco has not identified a workaround that fully resolves the problem. Disabling secondary authentication may reduce exposure in some configurations, but it also removes an important security control. Administrators should check the relevant tunnel groups and plan an upgrade to a fixed release.

Network-Switch.com view: Check which VPN services are exposed, confirm the affected configurations, and test remote access before and after the maintenance window. Turning off a second authentication factor should not be treated as a replacement for a security fix.

Cisco Talos Details KeyDrift Malware in SD-WAN Controller Intrusions

Published: October 28 and 29, 2026.

Cisco Talos published new research on October 28 into UAT-11473, a threat actor that used CVE-2026-20127 to gain access to Catalyst SD-WAN controller infrastructure. The vulnerability itself was disclosed in February 2026. What is new this week is Talos' account of the KeyDrift malware framework and how it was used, not the discovery of another SD-WAN vulnerability.

Talos found that KeyDrift was built to remain active inside controller processes, inspect decrypted control-plane traffic, and gather sensitive cryptographic key material. The activity targeted organizations involved in space and satellite services, aerospace, defense, and policy research. Talos also found infrastructure that overlapped with the Silent Train network associated with Volt Typhoon, but did not conclude that the same operator controlled every part of that infrastructure.

Network-Switch.com view: A compromised SD-WAN controller raises questions about the trustworthiness of the whole control environment. Investigators need to examine controller integrity, accounts, keys, and connected edge devices. Installing an update is important, but it does not by itself prove that an attacker has been removed.

ThousandEyes Adds Local BGP Route Collection for Enterprise Networks

Published: October 28 and 29, 2026.

Cisco ThousandEyes introduced private BGP monitoring through Enterprise Agents installed inside customer networks. SDxCentral reported on the capability on October 29 under the name Enterprise Routing Assurance. Instead of relying only on public BGP collectors, a local Enterprise Agent can receive selected internal routes over eBGP without moving the BGP session outside the company's network. The agent then forwards the collected telemetry to ThousandEyes through an authenticated HTTPS connection.

The aim is to help teams relate routing changes to the problems users actually experience. Route withdrawals, AS-path changes, and prefix reachability can be compared with packet loss, latency, and application availability during failures or planned failovers. Network teams can use their existing BGP export policies to decide which routing information the agent receives.

Network-Switch.com view: Seeing a BGP route return does not necessarily mean an application is working again. Teams should compare routing events with end-to-end performance tests when validating WAN failover or changes to a data center fabric.

Cisco Open-Sources Project Quarry for Multi-Step AI Agent Threat Detection

Published: October 28 and 29, 2026.

On October 28, Cisco released Project Quarry, an open-source language and evaluation engine for writing detection rules around AI agent activity. It addresses a problem that ordinary event-by-event checks can miss. A single tool call may look harmless, but a series of messages, tool calls, or data requests can reveal a suspicious pattern. SecurityWeek covered the release the following day.

Quarry uses both precise rule checks and model-based analysis. It can examine individual events or a complete agent session. Cisco says the technology is already used in AI Defense, while integration with DefenseClaw is planned. Quarry's findings can be passed to another security system for alerting, blocking, or investigation; the detection engine does not mean every deployment automatically gains those enforcement actions.

Network-Switch.com view: An AI agent with access to network configurations or operational tools needs clearly limited permissions. Its tool calls should be logged, and sensitive changes should require approval. Behavioral detection is useful, but it cannot replace basic access controls.

Cisco Introduces Model Foundry for Partner-Built Infrastructure AI

Published: October 26, 2026.

Cisco introduced Model Foundry at Partner Summit on October 26 as part of Cisco Cloud Control. The service gives partners API access to specialized Cisco models for networking and security tasks. Where appropriate, partners can also fine-tune models using customer-specific configurations, logs, alerts, and troubleshooting records.

Cisco named Deep Network 1.4, Antares-3B, and a network-operations decision model among the available model capabilities. It also described a lab evaluation with World Wide Technology in which a fine-tuned Deep Network Model recommended the correct fix in 11 out of 12 test scenarios. That is a result from a limited lab exercise, not a guarantee of the same accuracy in production. Cisco said Model Foundry was in Controlled Availability at launch, with partners receiving access first.

Network-Switch.com view: Troubleshooting models need to be tested against the device versions, topologies, and failure cases that customers actually use. Before offering automated remediation, partners should check the quality of the evidence, protect customer data, and require approval for changes to live networks.

Cisco 360 Adds Partner Incentives and a Future Distributor Value Index

Published: October 26 to 29, 2026.

Cisco announced several changes to its Cisco 360 Partner Program at Partner Summit on October 26. They include Ecosystem Deal Registration, intended to recognize the work of advisors and developers, along with broader incentives for customer adoption and sales across product areas. Cisco also made Cisco IQ Partner Support - Standard generally available. A unified Distributor Partner Value Index is planned for spring 2027, so that measurement framework was not yet generally available when Cisco made the announcement.

CRN's independent coverage outlined further incentive changes, including higher rewards for growth in annual contract value and new cross-selling incentives for eligible partners. Overall, the updates place more weight on ongoing services, customer relationships, and experience across Cisco's portfolio rather than hardware transactions alone.

Network-Switch.com view: Partners should check the eligibility rules, deal-registration terms, and incentive requirements before building them into a customer proposal. Distributor and reseller benefits are not automatically the same. Good BOM planning, licensing checks, and lifecycle support remain essential to a successful project.

Our Observation

This week's developments show two very different risks for network operators. A VPN flaw can interrupt access immediately, while an attacker inside an SD-WAN controller can undermine trust in the systems used to manage the network. Private BGP monitoring and Project Quarry address another practical challenge: teams need enough visibility to recognize problems before they spread or delay recovery. Cisco's partner announcements also point to greater use of specialized AI and lifecycle services, although those tools still need clear operating limits.

Before buying new equipment or migrating an existing environment, review software releases, exposed services, authentication settings, BGP export policies, AI model permissions, telemetry flows, and rollback plans together. These decisions affect one another and should be checked as part of the same project.

Sources

1. Cisco Security Advisory: CVE-2026-76418: ASA and FTD SSL VPN Tunnel DoS (October 28, 2026).
2. SecurityWeek: Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August (October 29, 2026).
3. BleepingComputer: New Cisco firewall zero-day exploited to crash SSL VPN devices (October 29, 2026).
4. Cisco Talos: Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN (October 28, 2026).
5. SecurityWeek: Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon's Silent Train Network (October 29, 2026).
6. SDxCentral: Cisco ThousandEyes brings improved BGP visibility to enterprise networks (October 29, 2026).
7. Cisco ThousandEyes: Introducing Private BGP Monitoring with Enterprise Agents (technical reference).
8. Cisco ThousandEyes: How Private BGP Monitoring with Enterprise Agents Collects and Analyzes BGP Routes (October 28, 2026).
9. Cisco Blogs: A Shared Language for Agent Defense: Introducing Project Quarry (October 28, 2026).
10. SecurityWeek: Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless Steps (October 29, 2026).
11. Cisco Blogs: Introducing Cisco Model Foundry: Bringing AI to our partners (October 26, 2026).
12. World Wide Technology: Cisco Model Foundry and partner network-troubleshooting evaluation (October 26, 2026).
13. Cisco Newsroom: Cisco Expands Partner Opportunity with New Cisco 360 Program Updates (October 26, 2026).
14. CRN: Cisco 360 Gets an Incentive Boost as Cisco Pushes Partners Toward AI (October 29, 2026).
15. ITPro: Cisco gives its 360 partner program a makeover fit for the AI era (October 27, 2026).