Security News > 2022 > April > Zero-Day Vulnerabilities Are on the Rise

2021 included the detection and disclosure of 58 in-the-wild 0-days, the most ever recorded since Project Zero began tracking in mid-2014.

While we often talk about the number of 0-day exploits used in-the-wild, what we're actually discussing is the number of 0-day exploits detected and disclosed as in-the-wild.

In 2021, Mandiant Threat Intelligence identified 80 zero-days exploited in the wild, which is more than double the previous record volume in 2019.

State-sponsored groups continue to be the primary actors exploiting zero-day vulnerabilities, led by Chinese groups.

The proportion of financially motivated actors­ - particularly ransomware groups - ­deploying zero-day exploits also grew significantly, and nearly 1 in 3 identified actors exploiting zero-days in 2021 was financially motivated.

Threat actors exploited zero-days in Microsoft, Apple, and Google products most frequently, likely reflecting the popularity of these vendors.

News URL

https://www.schneier.com/blog/archives/2022/04/zero-day-vulnerabilities-are-on-the-rise.html