Archive — US — techcrunch
Government hackers are leading the use of attributed zero-days, Google says
Google's report reveals that government hackers were behind the majority of attributed zero-day exploits in cyberattacks from 2023 to 2024, with a notable decrease in total zero-day exploits. At least 23 exploits were linked to government-backed hackers, with significant contributions from Chinese and North Korean sources. The report highlights a trend of increasing operational security among spyware makers, which continues to grow due to consistent demand from government clients.
Key points
- In 2024, zero-day exploits decreased from 98 in 2023 to 75.
- Out of 75, at least 23 exploits were attributed to government hackers, notably 10 by state-sponsored groups from China and North Korea.
- Eight exploits linked to commercial spyware makers were identified, including usage by Serbian authorities.
- The remaining 11 exploits were likely executed by cybercriminals like ransomware groups targeting enterprise networks.
- Google reports that software defenses are improving, leading to decreased exploitation in areas like browsers and mobile OS.
Why it matters
- The rise of attributed zero-days highlights an ongoing trend of government involvement in cyber operations, reflecting a broader increase in state-sponsored cyber activities.
- Major IT trends by 2025 indicate a focus on operational security and privacy, as the risk from government and criminal cyber activities increases.
- Recent historical events, such as global tensions involving China and North Korea, underline the geopolitical implications of cyber threats and the economic viability of surveillance and spyware industries.
The report paints a complex picture of current cybersecurity threats, emphasizing the crucial role of government hackers and the ongoing evolution of defenses against increasingly sophisticated exploits.