We're only 7 months into 2021 and already 37 zero days have been found in the wild. The previous high (since 2014) was 28 zero days caught in all of 2015. Are we getting more efficient at catching the zero days, or are attackers using zero days more liberally?

Or are we using the term "0-day" more easily?

Before this term was cool, they were just "undisclosed vulnerabilities".

But "0-day" looks more 1337.

Nah, I'm looking at project zero's data. I'm pretty sure they use a consistent definition

They might be more efficient and threat actors more numerous.

0-day in the wild, meaning (I hope) active exploitation of a hereby unknown vuln.

Did covid lockdowns give people more time to sit around at home and discover vulnerabilities?

Most in the wild zero days found are used by APTs. Those groups have people that already devoted all their time to finding vulnerabilities. Why would the lockdown make a difference?

Good point

Well, maybe independent researchers that find vulns in their spare time and sell on the black market found lots of them and drove the prices down. So APTs just started buying zero days.

@nobody I agree... more time at home means more people could do "independent researching" while working.