80% of exploited zero-days in 2025 done by nation states or the commercial surveillance vendors that ultimately serve them. Welcome to the world where everybody is defending against foreign militaries whether they are enlisted or not.

https://cloud.google.com/blog/topics/threat-intelligence/2025-zero-day-review