Google GTIG: 90 zero-day flaws exploited in 2025 as enterprise targets grow

Google's GTIG reports 90 zero-day vulnerabilities exploited in the wild in 2025—an increase from 78 in 2024—with nearly half targeting enterprise technologies and a marked rise in operating system and edge/security appliance exploitation; commercial surveillance vendors surpassed state actors in zero-day usage and attackers are increasingly chaining exploits and leveraging AI to accelerate discovery and weaponization.