Disclosure-to-exploitation window

Volt Typhoon-linked JDY botnet climbed back to 1,500 devices after the KV takedown

Black Lotus Labs counted about 650 JDY bots at the January 2024 low and more than 1,500 now, all of them fingerprinting exposed services soon after CVEs go public, with US military entities the most prominent target.