Zero-day exploits hit enterprises faster and harder

Zero-day exploits are increasingly targeting enterprise technologies, with nearly half of the 90 vulnerabilities tracked by Google last year affecting security appliances, VPNs, networking devices, and enterprise software platforms. Chinese cyberespionage groups have significantly escalated their zero-day exploitation efforts, doubling their count from 2024, while commercial surveillance vendors have overtaken state-sponsored hackers for the first time. The rapid exploitation of these vulnerabilities underscores the critical risk posed by trusted edge infrastructure, emphasizing the need for immediate exposure assessment. Notably, the targeting of enterprise software and security devices indicates a shift in attacker strategies, prioritizing the exploitation of trusted systems. This trend is particularly concerning, as it suggests that patching windows are closing quickly, leaving enterprises vulnerable to attack¹. The escalating zero-day threat landscape necessitates prompt action from security practitioners to mitigate potential risks and protect their organizations from these emerging threats.