Google's TIG documented 90 zero-day vulnerabilities exploited in 2025, up from 78 in 2024; commercial spyware vendors and China-linked groups led the abuse
Of the 90 zero-days GTIG tracked in 2025, 43 hit enterprise tech — Zero-day exploitation targeting enterprise tech products reached …
The Register Jessica Lyons
Related Coverage
- Look What You Made Us Patch: 2025 Zero-Days in Review Google Cloud Blog
- Google says 90 zero-days exploited in 2025 as commercial vendor activity grows The Record · Jonathan Greig
- Google says 90 zero-days were exploited in attacks last year BleepingComputer · Bill Toulas
- Google Confirms 90 Zero-Day Vulnerabilities Actively Exploited in 2025 Cyber Security News · Abinaya
- Google Threat Intelligence Group warns enterprise systems increasingly targeted by zero-day exploits SiliconANGLE · Duncan Riley
- Google says half of all zero-days it tracked in 2025 targeted buggy enterprise tech TechCrunch · Zack Whittaker
- Google: 90 zero-days exploited in the wild in 2025, most by spyware CyberInsider · Amar Ćemanović
- Google reveals huge number of zero-days patched in 2025, says worse may be to come as ‘AI changes the game’ TechRadar · Sead Fadilpašić
- Google GTIG: 90 zero-day flaws exploited in 2025 as enterprise targets grow Security Affairs · Pierluigi Paganini
- Spyware suppliers exploit more zero-days than nation states ComputerWeekly.com · Alex Scroxton
- Zero-day exploits hit enterprises faster and harder CSO · Lucian Constantin
- Nearly half of exploited zero-day flaws target enterprise-grade technology Cybersecurity Dive · David Jones
- Google Reports 2025 Zero-Days Exploits Targeted the Very Tools Meant to Stop Them Android Headlines · Tyler Lee
- Exploits and vulnerabilities in Q4 2025 Securelist · Alexander Kolesnikov
- Organizations hit by 90 zero-day vulnerabilities last year ITPro · Emma Woollacott
- Zero-Day Attacks on Enterprise Software Reach Record High, Google Warns Infosecurity · Danny Palmer
- Spyware Makers in 2025 for the First Time Topped Google's Lists of Zero-Day Exploits Security Boulevard · Jeffrey Burt
- Risky Bulletin: Iranian hackers are scanning for security cameras to aid missile strikes Risky Business · Catalin Cimpanu
- Great report from Google detailing the increase in zero-days in 2025. Mobile📱is a main character. Included in the findings👇 … iVerify
- “For the first time since we began tracking zero-day exploitation, we attributed more zero-days to commercial surveillance vendors than to traditional state-sponsored cyber espionage groups.” — Love to see the stats backing up my hunch. — https://cloud.google.com/... @evacide@hachyderm.io
Discussion
-
@cooperq.com
@cooperq.com
on bluesky
The cyber-mercenary industry is now bigger than state sponsored hacking. — “For the first time since we began tracking zero-day exploitation, we attributed more zero-days to [commercial surveillance vendors] than to traditional state-sponsored cyber espionage groups.” — cloud…