Talos: Salt Typhoon Campaign Targeted Cisco Equipment, But Did Not Rely on Published Cisco Bugs
Despite reports of exploitation of Cisco bugs, researchers found that only one known published vulnerability was used in a compromise. For the most part, the Salt Typhoon hackers were able to obtain valid login credentials from somewhere.