Cisco has confirmed that its networking products were compromised by Salt Typhoon's attacks against American telecommunication networks. Major American telecoms use Cisco devices and software.

The Chinese state-sponsored Salt Typhoon hacking group uses a custom utility called JumbledPath to stealthily monitor network traffic and potentially capture sensitive data in cyberattacks on U.S. telecommunication providers.

Cisco Talos observed Chinese hackers team pivoting from a compromised device operated by one telecom to target a device in another telecom.

Salt Typhoon exploited CVE-2018-0171 and stolen credentials to infiltrate U.S. telecom networks, persisting undetected for over three years.