Google: Spyware vendors behind 50% of zero-days exploited in 2023

Google's Threat Analysis Group and Mandiant reported a significant rise in zero-day exploitation in 2023, documenting 97 zero-days used in the wild (up >50% from 2022), with commercial surveillance vendors (CSVs) and their government customers responsible for a large share — roughly half of attributed zero-day exploitation — and many affecting browsers, mobile devices, and enterprise technologies; the report names several spyware vendors and recommends mitigations for high-risk users.