Evolving Zero-Day Exploit Trends

Google Threat Intelligence Group found a modest drop in overall zero-day exploitations in 2024 compared to 2023, largely driven by fewer browser and mobile OS exploits, but attackers shifted focus to enterprise platforms—44% of zero-day attacks targeted enterprise-specific technologies and 60% hit security/networking products. Government-backed cyber-espionage groups and commercial spyware vendors accounted for over half of known exploitations, with North Korea tied with China for the number attributed to a single nation-state, and Google warns the long-term trend of zero-day exploitation is steadily rising.