Google: Half of 2025’s 90 Exploited Zero-Days Aimed at Enterprises

Key Points:

• Google reports that 45 out of 90 zero-day vulnerabilities exploited in 2025 are targeting enterprise environments.
• The majority of these vulnerabilities have not been linked to specific threat actors, though spyware vendors and China are identified as leading contributors.
• Organizations should prioritize patch management and threat intelligence to mitigate risks associated with these zero-days.

Technical Details: The report highlights a concerning trend in the exploitation of zero-day vulnerabilities, particularly within enterprise systems, emphasizing the need for proactive security measures.

MITRE ATT&CK Techniques: None mentioned

IOCs Mentioned: None mentioned