Zero‑Day Attacks on Enterprise Software Reach Record High, Google Warns

Google Threat Intelligence Group's 2025 review found 90 zero-day vulnerabilities actively exploited in the wild, marking an increase from 2024 and signaling a shift toward enterprise-targeting—particularly security and networking appliances that provide privileged access—while end-user platforms (notably Windows) remain commonly targeted; mobile OS targeting rose and browser-based zero-days fell. GTIG warns this trend elevates risk to critical infrastructure and recommends architectural segmentation, least-privilege, real-time asset inventories, continuous monitoring and anomaly detection to detect and respond to these threats.