Google Reports 90 Zero-Day Exploits in 2025

Google's Threat Intelligence Group reported that 90 zero-day vulnerabilities were exploited in the wild during 2025, reflecting a continued rise in sophisticated cyberattacks despite a slight decline from the previous year's record. The number marked an increase from 78 such exploits tracked in 2024, with nearly half targeting enterprise technologies for the first time, underscoring a growing focus on corporate infrastructure.

Zero-day vulnerabilities, which attackers exploit before software vendors can patch them, affected a range of products, but the distribution highlighted evolving threats. Operating systems emerged as the most targeted category, accounting for 44 percent of the total, with Microsoft products bearing the brunt at 25 instances. Mobile operating systems saw a notable uptick, with 15 zero-days identified compared to nine the year before, often requiring chains of three or more flaws to achieve goals like remote code execution. Enterprise software and hardware, including networking devices, security appliances, and virtualization platforms, accounted for 43 exploits, or about 48 percent, a record share. Vendors such as Cisco, Fortinet, Ivanti, and VMware were...