Google tracked 75 zero days exploited in the wild in 2024, down from 98 in 2023 but up from 63 in 2022; state-sponsored threat groups led in zero-day exploits
Google Threat Intelligence — Visibility and context on the threats that matter most. — Executive Summary
Google Cloud Blog
Related Coverage
- Enterprise-specific zero-day exploits on the rise, Google warns CSO · Lucian Constantin
- Zero-day exploitation drops slightly from last year, Google report finds Cybersecurity Dive · Eric Geller
- Google: 97 zero-days exploited in 2024, over 50% in spyware attacks BleepingComputer · Sergiu Gatlan
- Government hackers are leading the use of attributed zero-days, Google says TechCrunch · Lorenzo Franceschi-Bicchierai
- Google Threat Intelligence Group (GTIG) tracked 75 actively exploited zero-day flaws in 2024 Security Affairs · Pierluigi Paganini
- Google Reports 75 Zero-Days Exploited in 2024 — 44% Targeted Enterprise Security Products The Hacker News
- Most of the zero-day exploits in 2024 were used by government-sponsored hackers Android Headlines · Arthur Brown
- Google Warns of 75 Zero-Day Vulnerabilities Exploited in the Wild Cyber Security News · Guru Baran
- Zero-Day Exploitation Figure Surges 19% in Two Years Infosecurity · Phil Muncaster
- Google report finds drop in zero-day exploitation in 2024 but warns enterprise risks are rising SiliconANGLE · Duncan Riley
- Google Logs 75 Zero-Days in 2024, Enterprise Attacks at All-Time High CyberInsider · Bill Mann
- NEW: Last year, there were 34 recorded zero-days being exploited in real-world attacks, which were attributed to specific groups. — Of those, 23 were attributed to government-backed hackers, including spyware makers, which shows that governments are the main users of zero-days. … @lorenzofb@infosec … · Lorenzo Franceschi-Bicchierai
- A few notes on the recently published Google Cloud (ex. Mandiant) Zeroday Report: — Exploit chains made up of multiple zero-day vulnerabilities continue to be almost exclusively (~90%) used to target mobile devices. — 2024-zero-day-exploitation-analysis- en, page 7 … @nopatience@swecyb.com · Christoffer S.
- Google published a blog post about 0days and the like. This jumped out at me: … Stack canaries gained popularity in the Linux world in 2002. When did the Linux-based Ivanti ICS product get stack canaries, after years of ITW exploitation? 2025. That's right. … @wdormann@infosec.exchange · Will Dormann
- Hello 0-Days, My Old Friend: A 2024 Zero-Day Exploitation Analysis Lobsters
- Government Hackers Are Leading the Use of Attributed Zero-Days, Google Says Slashdot · Msmash