TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

Infosecurity Magazine

Zero‑Day Attacks on Enterprise Software Reach Record High, Google Warns

2026-03-06 · Read original ↗

ATT&CK techniques detected

5 predictions
T1588.006Vulnerabilities
86%
“is nearly double the five zero - days attributed to financially motivated threat actors in 2024. the report concluded that as the ongoing use of zero - day vulnerabilities by nation - state backed hacking operations - particularly those operating out of china - cybercriminal grou…”
T1588.006Vulnerabilities
79%
“zero - days were used to exploit end - user platforms and products. of these, operating systems were the most targeted end - user product accounting for 24 ( 27 % ) of the tracked zero - days. the operating system most targeted by zero - days was microsoft windows. browser - base…”
T1587.004Exploits
70%
“zero - days were used to exploit end - user platforms and products. of these, operating systems were the most targeted end - user product accounting for 24 ( 27 % ) of the tracked zero - days. the operating system most targeted by zero - days was microsoft windows. browser - base…”
T1588.006Vulnerabilities
45%
“zero ‑ day attacks on enterprise software reach record high, google warns the number of zero - day vulnerabilities uncovered in enterprise software and appliances reached an all - time high last year, analysis by google threat intelligence group ( gtig ) has warned. in the report…”
T1588.006Vulnerabilities
39%
“the value of tools that enable privilege escalation, high - level access and broad scale of impact. ” attackers target security and networking appliances of those zero - day exploits which targeted enterprise, almost half ( 21 ) targeted security and networking solutions. they ar…”

Summary

Almost a quarter of the zero days detected by Google in 2025 targeted security and networking appliances