Google TAG Reports Zero-Day Surge and Rise of State Hacker Threats

Google’s Threat Analysis Group (TAG) and Mandiant reported 97 zero-day vulnerabilities exploited in the wild last year, a significant year-over-year increase, with 30 critical vulnerabilities and a rise in enterprise-targeted exploitation; the report also attributes multiple zero-days to PRC-linked state-backed actors, highlights growing exploitation of third-party components, and offers mitigation and disclosure recommendations for organizations.