China-linked hackers exploited multiple CVEs in April 2025 to target global entities with advanced persistence.