Google: 75 Zero-Days Seen In 2024 As Nations, Spyware Vendors Continue Exploitation
The Record, Tuesday, April 29th, 2025
The number of unreported bugs exploited by criminals, nation states and commercial vendors fell in 2024, but hackers are increasingly targeting vulnerabilities in security software and appliances to gain greater access to victim systems.
Google's Threat Intelligence team published its annual zero-day report on Tuesday, finding that 75 vulnerabilities were exploited in the wild in 2024, down from 98 in the prior year.
Google, which defines zero-days as vulnerabilities exploited in the wild before a patch is made publicly available, said cyber espionage was still the leading motivation behind the exploitation of bugs.
The report divides the 75 bugs into two buckets: those impacting end-user platforms like mobile devices or browsers and others such as security software and appliances.