Cisco has confirmed that its networking products were compromised by Salt Typhoon's attacks against American telecommunication networks. Major American telecoms use Cisco devices and software.

Chinese hackers who infiltrated U.S. telecoms likely only used one, known Cisco vulnerability, says Cisco's cybersecurity unit. Otherwise, the Chinese nation-state

In research published Thursday on Salt Typhoon's hacking campaign against telecom carriers, Cisco Talos said the Chinese state-sponsored threat group had gained access to Cisco devices through compromised login credentials and that no new vulnerabilities were discovered during investigation.

Salt Typhoon exploited CVE-2018-0171 and stolen credentials to infiltrate U.S. telecom networks, persisting undetected for over three years.

Discover how the Salt Typhoon cyberattack exploits vulnerabilities in Cisco devices, posing a significant threat to network security.

The Chinese hacking collective has widely leveraged vulnerabilities in communications infrastructure to breach dozens of telecom providers in the U.S. and overseas.

Salt Typhoon (aka RedMike, Earth Estries, FamousSparrow, GhostEmperor, and UNC2286), gained access through a US affiliate of a UK telecoms company, an unnamed US ISP, an Italian ISP, and telcos in South Africa, Thailand and Myanmar.