Attackers are reverse-engineering enterprise patches in days, probing zero-days within hours and finding millions of records sitting behind misconfigured cloud permissions