Google says 90 zero-days were exploited in attacks last year
Summary
Google's Threat Intelligence Group reported that 90 zero-day vulnerabilities were exploited in attacks during 2025. A significant portion of these exploits targeted enterprise software and appliances, highlighting a persistent threat to businesses.
IFF Assessment
FOE
The exploitation of zero-day vulnerabilities, especially in enterprise software, represents a direct and significant threat to organizations' security.
Defender Context
The active exploitation of 90 zero-days in a single year underscores the critical need for robust threat intelligence and rapid patching. Defenders must prioritize monitoring for emerging threats and have well-defined incident response plans ready for zero-day events, particularly those affecting enterprise systems.