Threat actors expanded operations using malicious apps, outdated devices, and IoT exploits while global attack volumes surged across key regions.