VulnerabilitiesHIGH

Zero-Day Exploits Surge: 90 Flaws Target Enterprises in 2025

🎯

Basically, hackers found and used 90 serious flaws in software this year.

Quick Summary

Google's GTIG reveals 90 zero-day vulnerabilities exploited in 2025, impacting enterprises significantly. This surge in attacks highlights the urgent need for robust cybersecurity measures. Stay updated and protect your systems now!

What Happened

In a startling revelation, Google’s Threat Intelligence Group (GTIG) has reported 90 zero-day vulnerabilities exploited in the wild during 2025. This marks a significant increase from the 78 vulnerabilities identified in 2024. Although the number is slightly below the 100 observed in 2023, the trend shows a worrying escalation in attacks, particularly aimed at enterprise systems.

Zero-day vulnerabilities are flaws in software that are unknown to the vendor and can be exploited by attackers before a fix is available. The rise in these vulnerabilities highlights the growing sophistication of cybercriminals and their focus on larger targets, such as businesses and organizations. As enterprises increasingly rely on digital infrastructure, they become prime targets for these attacks.

Why Should You Care

You might think this doesn’t affect you, but consider this: if you work for a company that uses software, you could be at risk. Zero-day vulnerabilities can lead to data breaches, financial loss, and compromised sensitive information. It’s like leaving your front door unlocked; you may not notice it until something valuable is stolen.

Imagine your personal data being accessed or your company’s operations disrupted because of a flaw that was never fixed. The stakes are high, and as these vulnerabilities are exploited, it’s not just businesses that suffer — it’s everyone who relies on technology in their daily lives. Protecting your data and systems is more crucial than ever.

What's Being Done

In response to this alarming trend, Google and other cybersecurity experts are ramping up their efforts to identify and patch these vulnerabilities. Here are some immediate actions you can take:

  • Ensure your software and systems are up to date with the latest security patches.
  • Use security tools that can detect and respond to potential threats.
  • Educate yourself and your team about the importance of cybersecurity practices.

Experts are closely monitoring the situation to see how these vulnerabilities evolve and what new tactics hackers might employ next. Staying informed is key to safeguarding your digital life.

🔒 Pro insight: The increase in zero-day exploits indicates a shift in attacker focus towards enterprise environments, necessitating enhanced detection and response strategies.

Original article from

Security Affairs · Pierluigi Paganini

Read Full Article

Related Pings

MEDIUMVulnerabilities

Vulnerabilities - CISA Adds Wing FTP Server Flaw Alert

CISA has flagged a vulnerability in Wing FTP Server that could expose sensitive information. Organizations using older versions need to act quickly to protect their systems. This flaw could lead to further attacks if not addressed promptly.

Security Affairs·
HIGHVulnerabilities

HPE Vulnerability - Critical Update for Telco Service Orchestrator

HPE has issued a security advisory regarding a vulnerability in the Telco Service Orchestrator. Users of versions before v4.2.12 are at risk. Immediate updates are necessary to protect against potential exploits.

Canadian Cyber Centre Alerts·
CRITICALVulnerabilities

CVE-2025-47812 - Critical Wing FTP Server Vulnerability Alert

A critical vulnerability in Wing FTP Server has been discovered and actively exploited. Users of versions v7.4.3 and prior are at risk. Immediate updates to v7.4.4 are essential for protection.

Canadian Cyber Centre Alerts·
HIGHVulnerabilities

Vulnerabilities - CISA Flags Wing FTP Server Flaw Exploited

CISA has issued a warning about a critical vulnerability in Wing FTP Server. This flaw affects numerous organizations, including federal agencies. Immediate patching is essential to prevent potential remote code execution attacks.

BleepingComputer·
HIGHVulnerabilities

UK's Companies House - Security Flaw Exposed Business Data

A serious security flaw at Companies House exposed sensitive data of five million companies for five months. This raises significant concerns about data protection and privacy. Companies House is investigating the incident and has reported it to the relevant authorities.

BleepingComputer·
HIGHVulnerabilities

Microsoft Edge Vulnerability - Critical Update Released

Microsoft has released a critical update for Edge to fix CVE-2026-3910. Users must update to version 146.0.3856.59. This vulnerability poses serious risks, so immediate action is essential.

Canadian Cyber Centre Alerts·