The CISA post yesterday https://us-cert.cisa.gov/ncas/alerts/aa20-352a https://us-cert.cisa.gov/ncas/alerts/aa20-352a mentioned "Note (Updated December 18, 202

The CISA post yesterday https://us-cert.cisa.gov/ncas/alerts/aa20-352a https://us-cert.cisa.gov/ncas/alerts/aa20-352a mentioned "Note (Updated December 18, 2020): CISA has evidence of initial access vectors other than the SolarWinds Orion platform." This raised any eye that there are other attack vectors that have been found but which they have not or do not have information on.