Google Reports 75 Zero-Day Vulnerabilities Actively Exploited in the Wild

In a comprehensive report released by the Google Threat Intelligence Group (GTIG), 75 zero-day vulnerabilities were identified as actively exploited in the wild throughout 2024, marking a slight decline from 98 in 2023 but an increase from 63 in 2022.

These vulnerabilities, defined as flaws exploited before a patch becomes publicly available, underscore a persistent and evolving threat landscape.

GTIG’s analysis, blending original research with breach investigations and credible open-source data, highlights a notable shift in attacker focus from end-user platforms to enterprise-specific technologies, reflecting strategic changes in threat actor priorities.

While the overall trend of zero-day exploitation shows a slow but steady rise over the past four years, the growing targeting of enterprise products signals a need for broader vendor vigilance and enhanced security measures across diverse ecosystems.

Espionage Actors and Enterprise Exploits Dominate

Delving into the specifics, GTIG noted that 44% of these 2024 zero-days-33 vulnerabilities-targeted enterprise ...