Cisco, Salt Typhoon

Salt Typhoon hackers exploited stolen credentials and a 7-year-old software flaw in Cisco systems
The Chinese hacking collective has widely leveraged vulnerabilities in communications infrastructure to breach dozens of telecom providers in the U.S. and overseas.
China’s Salt Typhoon Spies Are Still Hacking Telecoms—Now by Exploiting Cisco Routers
Despite high-profile attention and even US sanctions, the group hasn’t stopped or even slowed its operation, including the breach of two more US telecoms.
Cisco Details ‘Salt Typhoon’ Network Hopping, Credential Theft Tactics
Cisco Talos observed Chinese hackers team pivoting from a compromised device operated by one telecom to target a device in another telecom.
Salt Typhoon targets vulnerabilities in Cisco devices
Discover how the Salt Typhoon cyberattack exploits vulnerabilities in Cisco devices, posing a significant threat to network security.
China’s Salt Typhoon hackers continue to breach telecom firms despite US sanctions
Threat intelligence firm Recorded Future said it had observed Salt Typhoon breaching 5 telcos between December 2024 and January 2025.
Cisco: Salt Typhoon used new custom malware in telecom attacks
In research published Thursday on Salt Typhoon's hacking campaign against telecom carriers, Cisco Talos said the Chinese state-sponsored threat group had gained access to Cisco devices through compromised login credentials and that no new vulnerabilities were discovered during investigation.
Salt Typhoon Hackers Used Old Cisco Bug, Stolen Credentials to Hop on Routers
China-linked hackers who broke into global telecommunications systems likely exploited a seven-year-old bug in Cisco’s router software and used stolen credentials to gain access to systems, the company said.
Salt Typhoon Targeting Old Cisco Vulnerabilities in Fresh Telecom Hacks
Chinese APT Salt Typhoon has been exploiting known vulnerabilities in Cisco devices in attacks on telecom providers in the US and abroad.
Salt Typhoon Hacks: Cisco Uncovers Years-Long Cyber Intrusion Into US Telecom Networks
Cisco has confirmed that its networking products were compromised by Salt Typhoon's attacks against American telecommunication networks. Major American telecoms use Cisco devices and software.
Cisco Confirms Salt Typhoon Exploited CVE-2018-0171 to Target U.S. Telecom Networks
Salt Typhoon exploited CVE-2018-0171 and stolen credentials to infiltrate U.S. telecom networks, persisting undetected for over three years.
Hosted on MSN8d
China's Salt Typhoon Spies Are Still Eavesdropping on Global Networks
Undeterred by "significant media coverage and US sanctions," the group known as Salt Typhoon "continues to compromise ...
China-backed hackers continue cyberattacks on telecom companies
Salt Typhoon's hacking spree has continued this year as the China-backed threat group recently compromised five more telecom ...