ShinyHunters exploited an Oracle PeopleSoft zero-day for 14 days before Oracle knew. Volt Typhoon's JDY botnet doubled and is scanning U.S. military networks. Velvet Ant backdoored Linux login binaries since 2016. Ivanti Sentry CVSS 10 — backdoored within 24 hours.