Reply to post:

SWIFT said that the attack didn't exploit a vulnerability in its security systems and was entirely dependent on an attacker compromising a local terminal

I'd call that exploiting a vulnerability in the security system. ..