China's APT40 gang is ready to attack vulns within hours or days of public release

An eight-nation advisory profiles China-aligned APT40 (aka Kryptonite Panda) as a state-sponsored actor that rapidly weaponizes exploit proof-of-concepts—often within hours—to target known and historical vulnerabilities (e.g., Log4J, Confluence, Exchange), leverages compromised SOHO devices as operational infrastructure and last-hop redirectors, employs web shells and credential theft to gain persistence, and deploys malware to exfiltrate data; the advisory includes mitigation guidance, links to malware samples, and case studies.