Zero-Day Exploits Hit Enterprise Devices in 2025

Google's Threat Intelligence Group tracked 90 zero-day vulnerabilities exploited in 2025. About 48% targeted enterprise technologies such as firewalls, VPNs and virtualization platforms. Attribution shows state-backed groups focused on edge and security appliances while commercial surveillance vendors targeted mobile devices and browsers.

Part of the PlainSec briefing for 2026-03-07

Sources

• BleepingComputer
• Mandiant
• The Record from Recorded Future
• SecurityWeek
• TechCrunch Security
• Cybersecurity Dive
• Infosecurity Magazine