Compared with some of the pre-war predictions, the visible effects of Russian cyber-campaigns have been somewhat underwhelming. E.g. the Ukrainian power grid remained largely online until the Russians started to launch physical attacks on the infrastructure. Perhaps they've already squandered their best assets (e.g. zero-days) or are keeping them for later / other enemies.