Zero Day Initiative | Blog
Follow
Looking Back at the Trend ZDI Activities from 2024
The Trend Zero Day Initiative (ZDI) reflects on its accomplishments in 2024, including the success of its Pwn2Own competitions, which awarded over $3.5 million for 148 unique zero-day vulnerabilities. The inaugural Pwn2Own Automotive event in January 2024 set a record with $1.323 million in awards for 49 unique zero-day vulnerabilities. The ZDI published 1,741 advisories in 2024, down slightly from the previous year's record high. The program's own researchers reported over 40% of the published advisories. Coordinated disclosure of vulnerabilities remains a priority, with 9.7% of disclosures being 0-day in 2024. The top vendors with published advisories in 2024 were AutoDesk, Delta Electronics, and Apple. Despite publishing fewer bugs in 2024, the ZDI disclosed more Critical and High severity bugs than in 2023. The most common types of bugs reported in 2024 included stack overflows and SQL injections. Looking ahead to 2025, the ZDI anticipates staying busy with upcoming Pwn2Own contests and a backlog of over 350 cases waiting to be patched. The program plans to update its website and blog, expand its video offerings, and refine its outreach and acquisition efforts to better align with customer risks.