Summary: Google’s Threat Intelligence Group detailed the analysis of zero-day vulnerabilities in 2024, noting a decrease from the previous year. The report tracked 75 zero-day vulnerabilities, predominantly affecting enterprise technologies and end-user products. Most exploits were linked to state-sponsored threat actors and commercial surveillance vendors, with mobile devices being a primary target for multiple vulnerability exploits.
Affected: Google’s Threat Intelligence Group, enterprise technologies, end-user products
Keypoints :
- 75 zero-day vulnerabilities tracked in 2024, down from 98 in 2023 but up from 63 in 2022.
- 33 zero-days targeted enterprise technologies, while the remainder affected end-user products like browsers and mobile devices.
- Chrome was the most targeted browser; a significant rise in Windows exploits was observed, alongside a drop in Safari and iOS exploits.
- About 90% of exploits chaining multiple vulnerabilities targeted mobile devices, with many aimed at third-party Android components.
- 34 out of 75 exploits linked to known threat actors, with nearly 45% attributed to state-sponsored groups.
- Commercial surveillance vendors were linked to nearly a quarter of the exploits, with 30% connected to non-state financially motivated groups.
Source: https://www.securityweek.com/google-tracked-75-zero-days-in-2024/