Video | Business Headlines | Internet | Science | Scientific Ethics | Technology |
Google Threat Intelligence Group (GTIG) tracked 90 zero-day vulnerabilities exploited in-the-wild in 2025. Although that volume of zero-days is lower than the record high observed in 2023 (100), it is higher than 2024’s count (78) and remained within the 60–100 range established over the four years, indicating a trend toward stabilization at these levels.
In 2025, we continued to observe the structural shift, first identified in 2024, toward increased enterprise exploitation. Both the raw number (43) and proportion (48%) of vulnerabilities impacting enterprise technologies reached all-time highs, accounting for almost 50% of total zero-days exploited in 2025. We observed a sustained decrease in detected browser-based exploitation, which fell to historical lows, while seeing increased abuse of operating system vulnerabilities.
State- espionage groups continue to prioritize edge devices and security appliances as prime entry points into victim networks, with just over half of attributed zero-day exploitation by these groups focused on these technologies. Commercial surveillance vendors (CSVs) maintained an interest in mobile and browser exploitation, adapting and expanding their exploit chains to bypass more recently implemented security boundaries and other mobile security improvements. Multiple intrusions linked to BRICKSTORM malware deployment demonstrated a range of objectives, but the targeting of technology companies demonstrated the potential theft of valuable IP to further the development of zero-day exploits.
Enterprise is the New Primary Target: 48% of all 2025 zero-days targeted enterprise-grade technology, with attackers taking advantage of security and networking tools, especially edge devices that often lack endpoint detection and response (EDR) technology. This significant pivot towards enterprise exploitation has reached an all-time high.
The CSV-Espionage Shift: For the first time since tracking began, GTIG attributed more zero-days to Commercial Surveillance Vendors (CSVs) than to traditional state- cyber espionage groups, demonstrating the expansion of zero-day access to a wider array of customers. Consistent with past trends, PRC-nexus cyber espionage groups remain the most prolific state- users in 2025, heavily focusing on edge devices to maintain long-term network footholds.
The AI Acceleration Threat: GTIG forecasts that AI will accelerate the ongoing race between attackers and defenders in 2026, speeding up reconnaissance, vulnerability discovery, and exploit development. This will place further pressure on defenders to better detect and respond to zero-day exploitation.
New Attack Paradigm: The targeting of intellectual property (IP)—such as source code—by certain espionage groups suggests a potential new paradigm where data theft is used to further long-term zero-day development against a vendor's software and their customers.
The Committee’s report is clear, we can better protect all New Zealanders through such measures as transparency and accountability, overseen by an independent regulator.
The programme connects employers with pre-screened, work-ready candidates from MSD’s talent pipeline, the largest in the country.
The Otago region had the most grazing sales in New Zealand for the year ending December 2025, up 50.0% to 48 sales, followed by Northland, at 42 sales (up 27.3%).
Coral reefs are likely to erode even under low-emission scenarios, but some reefs may persist if corals evolve to become more resistant to ocean warming.
Better communication and stronger consumer education are essential to improving outcomes for consumers. Everyone deserves to understand their rights and feel confident they are being treated fairly.
Sixty-four percent of survey respondents said they were extremely or very concerned that there was insufficient regulation and law regarding the development of AI.
Business Business.scoop The Main Report - Trends In NZ Business Finance NZ & AUS Shares Oil Futures Spot Gold Science Weather Underground Te Papa's Blog
Finance NZ & AUS Shares Oil Futures Spot Gold Science Weather Underground Te Papa's Blog
Science Weather Underground Te Papa's Blog
Get started today with a free trial
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
