Google reports surge in zero-day vulnerabilities targeting enterprise systems

In 2024, attackers exploited some 75 different zero-day vulnerabilities, making a decline from 2023 figures but an increase over 2022, according to Google.

Google’s Threat Intelligence Group reported that, in 2024, it tracked 75 different zero-day vulnerabilities. This number is less than the 98 vulnerabilities tracked in 2023 but greater than the 63 vulnerabilities tracked in 2022. Google’s security team grouped the vulnerabilities into two categories: technologies for everyday users, including mobile phones, operating systems, and browsers, and business-oriented technologies like security software and specialized equipment.

According to Google, the companies behind these products have become better at plugging security holes, making some types of attacks more difficult. At the same time, commercial surveillance companies have become more adept at covering their tracks, which may have made them harder to detect.