According to Google, the majority of zero-day vulnerabilities it uncovers are attributed to spyware vendors.
Google’s Threat Analysis Group (TAG) found that in 2023, 80% of the zero-day vulnerabilities they discovered were linked to commercial spyware vendors (CSVs), which exploit these vulnerabilities to conduct surveillance on devices worldwide. Zero-day vulnerabilities are security weaknesses unknown to the software vendors or lacking available fixes. Google’s TAG closely monitors 40 CSVs to detect…