Cathay Pacific's unpatched decade-old vulnerability led to 2018 breach

Pair of groups dropped keyloggers onto systems reaching back to 2014.