Google Report states that Zero-Day decrease in 2024, but warns the risk of the company

Google Threat Intelligence Group today released His annual Zero Trends report 2024, surprisingly stating that the zero-day threats used last yr was reduced in the wild, despite the long-term trend up.

The threat of zero day is a form of cyber attack that is targeted on susceptibility to the software unknown software or product creator, and since it’s unknown, the patch or amendment just isn’t available at the time of operation. Attacks use undisclosed defects to acquire unauthorized access, data theft or disturbing systems before the implementation of defense.

By 2024, Google scientists identified 75 gaps on zero days used in the wild, of 98 in 2023, but in comparison with 63 in 2022.

It was found that the attacks on browsers and mobile devices dropped rapidly, while the attackers were particularly interested in technologies focused on the enterprise, which became a much bigger goal last yr, which is 44% of all zero feats. It was also found that security and network devices are particularly attractive to attackers, because these systems offer wide access to the network and sometimes have weaker monitoring capabilities.

Thanks to the operating system and with zero surprise, Microsoft Windows was still a preferred goal of attacks, and the number of gaps used on a zero day increased to 22 in 2024, Google chrome remained the most targeted browser and Android devices, it still suffered from threats in the third part components, when general mobile use.

The report recorded in the report on how attacks appeared to cover flaws without use, injection errors and gaps in the scripts between the sites, were the most typical. The defect without use is a susceptibility in which the program continues to make use of memory after releasing it, enabling the attacker to perform malicious code or cause a system failure.

According to origin, the report assigned over half of the zero days to the groups of espionage, including the entity allegedly supported by China and North Korea. Commercial sellers are also recorded in the report as energetic players, although the improvements of their operational safety made the attribute harder than in previous years.

Groups of lack of response, similar to financially motivated Fin11 and cigars, also use zero days in campaigns geared toward forcing and espionage. In particular, for the first time, the state actors of north-korea, supported by the state, adapted alleged Chinese groups in terms of zero-abrasion attributed to them, which implies significant escalation in their operational concentration.

Google scientists have come to a warning that although the security efforts of suppliers have made it difficult to make use of some technologies, the use of zero day will probably increase progressively. The report encourages suppliers, especially those that provide software for enterprise and network devices, to strengthen their defense through higher coding practices, wider monitoring and architectural security, similar to network segmentation.

Photo: Siliconangle/Reve