Google research exposes ongoing global risk from zero-day vulnerabilities

In context: A zero-day vulnerability is an undiscovered security flaw that has already been exploited by cybercriminals and other threat actors. According to new research from Google, the zero-day threat continues to grow at a slow but steady pace.

The zero-day business is steadily improving for cybercriminals and becoming increasingly dangerous for end users, professionals, and enterprise organizations. After analyzing 75 zero-day vulnerabilities that could be confidently attributed in 2024, the Google Threat Intelligence Group released a report detailing the facts and trends uncovered during the investigation.

The report focuses on zero-day bugs that were both detected and disclosed, meaning a significant number of undetected vulnerabilities may still be lurking in IT systems and devices.

While the 75 exploited bugs identified in 2024 represent a decrease from the 98 reported in 2023, the overall trend remains consistent: the zero-day exploitation market continues to grow at a steady pace. Attackers are ...