Google has discovered that a private surveillance company is using three recently discovered zero-day vulnerabilities in