**December 1, 2021:** First known exploitation in the wild (later attributed to Chinese state actors) - **December 9, 2021:** Public disclosure and PoC release - **December 10, 2021:** Mass scanning begins; Cloudflare reports 400,000 exploit attempts per hour - **December 11, 2021:** First ransomwar