MalwarePublished 5 Mar 2026

Google: Half of 2025’s 90 Exploited Zero-Days Aimed at Enterprises

Source SecurityWeek

Description

Less than half of the total zero-days have been attributed to a threat actor, but spyware vendors and China are in the lead. The post Google: Half of 2025’s 90 Exploited Zero-Days Aimed at Enterprises appeared first on SecurityWeek .

Impact

The exploitation of zero-day vulnerabilities in enterprise environments can lead to severe consequences including unauthorized access, data breaches, espionage, intellectual property theft, and disruption of critical business operations. Since zero-days are unknown to vendors, traditional signature-based defenses are ineffective until patches are developed and deployed. This can result in prolonged undetected intrusions and increased risk of lateral movement within networks. Enterprises across sectors such as finance, technology, government, and critical infrastructure are at heightened risk due to the value of their data and systems. The attribution to spyware vendors and China suggests potential geopolitical and espionage motives, increasing the likelihood of targeted attacks against strategic organizations. The medium severity rating indicates a moderate but significant threat level, emphasizing the need for proactive defense measures. Failure to address these risks can lead to financial losses, reputational damage, regulatory penalties, and national security implications.

Defensive guidance

Organizations should implement advanced threat detection solutions that leverage behavioral analytics and anomaly detection to identify suspicious activity potentially linked to zero-day exploits. Employing a robust vulnerability management program that includes rapid patch deployment once updates become available is critical. Network segmentation and least privilege access controls can limit the impact of a successful exploit. Regular threat intelligence sharing with industry peers and government agencies can provide early warnings about emerging zero-day threats. Endpoint detection and response (EDR) tools should be deployed to monitor and respond to suspicious behaviors. Conducting regular security audits and penetration testing can help identify potential attack vectors. Additionally, organizations should develop and regularly update incident response plans specifically addressing zero-day exploit scenarios. Employee training on phishing and social engineering can reduce the risk of initial compromise vectors. Finally, engaging with vendors and security communities to stay informed about zero-day disclosures and mitigations is essential.

References

securityweek.com/google-half-of-2025s-90-exploited-zero-days-aimed-at-enterprises/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 5 Mar 2026, 15:04 UTC

References

Community reviews