Apple Confirms Zero-Day Attacks Hitting macOS Systems

>The vulnerabilities, credited to Google’s TAG (Threat Analysis Group)

Do they find these by monitoring the brokers of zero days or analyzing devices of people who are being targeted?

There's actually a very recent talk about this! https://www.youtube.com/watch?v=2zrcemxCg4Y