Google says spyware makers and China-linked groups dominated zero-day attacks last year

Google's Threat Intelligence Group found 90 zero-day vulnerabilities actively exploited in 2025 (43 targeting enterprise products), with China-linked espionage groups and commercial surveillance vendors responsible for a large share; security, networking, and edge devices were most affected, highlighting significant enterprise risk from sophisticated, in-the-wild exploitation.