Enterprise tech dominates zero-day exploits with no signs of slowdown

Google Threat Intelligence Group reported 75 exploited zero-day vulnerabilities in 2024, noting that over half were used in cyberespionage by state-sponsored groups and commercial surveillance vendors; enterprise security and networking products (including Microsoft, Google, Apple, and Ivanti) were heavily targeted, and GTIG expects zero-day exploitation to continue increasing due to active exploit markets and slow adoption of secure-by-design practices.