zero-days ZeroDay Field Notes: Shells, Shadows, and Sandbox Escapes APT chains hitting Citrix and Cisco with stealthy webshells, new RATs and a Go packer boosting EDR evasion; also destructive ops and proxy C2.