Apple Confirms Zero-Day Attacks Hitting macOS Systems

>The vulnerabilities, credited to Google’s TAG (Threat Analysis Group)

Do they find these by monitoring the brokers of zero days or analyzing devices of people who are being targeted?

little of column a, little of column b

they also have insane peering and backbone network infra, run one of the largest cloud providers, host basically everyone's email, documents, and file storage, chat, app store, and have a native browser installed

I'm sure they have many different signals they can look at to see compromised type behavior differing from the profile they have on you

I suspect firebase crashlytics is the source of many

There's actually a very recent talk about this! https://www.youtube.com/watch?v=2zrcemxCg4Y

Both, but also a lot of original research. They are public about this.

I also found a recent article: https://www.nzz.ch/english/googles-spyware-hunters-track-sta...