A new report from Google's Threat Intelligence Group (GTIG) finds that 75 zero-days were exploited in the wild last year, with a little over half involving spyware.