The number of Cisco devices hacked via the CVE-2023-20198 zero-day has reached 40,000, including many in the US.