| | From Chrome renderer code exec to kernel with MSG_OOB (googleprojectzero.blogspot.com) |
| 2 points by todsacerdoti 8 days ago | past | discuss |
|
| | Project Zero – Policy and Disclosure: 2025 Edition (googleprojectzero.blogspot.com) |
| 102 points by esnard 19 days ago | past | 39 comments |
|
| | The Windows Registry Adventure #7: Attack surface analysis (googleprojectzero.blogspot.com) |
| 64 points by todsacerdoti 84 days ago | past | 14 comments |
|
| | Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages (googleprojectzero.blogspot.com) |
| 9 points by weinzierl 3 months ago | past |
|
| | Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages (googleprojectzero.blogspot.com) |
| 49 points by MajesticHobo2 3 months ago | past | 1 comment |
|
| | Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages (googleprojectzero.blogspot.com) |
| 1 point by todsacerdoti 3 months ago | past |
|
| | Blasting Past WebP - An analysis of the NSO BLASTPASS iMessage exploit (googleprojectzero.blogspot.com) |
| 263 points by el_duderino 4 months ago | past | 124 comments |
|
| | Blasting Past WebP (googleprojectzero.blogspot.com) |
| 3 points by todsacerdoti 4 months ago | past |
|
| | Attacking the Qualcomm Adreno GPU (2020) (googleprojectzero.blogspot.com) |
| 3 points by DyslexicAtheist 6 months ago | past |
|
| | Mitigations are attack surface, too (2020) (googleprojectzero.blogspot.com) |
| 9 points by tripdout 7 months ago | past |
|
| | The Qualcomm DSP Driver – Unexpectedly excavating an exploit (googleprojectzero.blogspot.com) |
| 93 points by todsacerdoti 8 months ago | past | 26 comments |
|
| | Simple macOS kernel extension fuzzing in userspace w/ IDA and TinyInst (googleprojectzero.blogspot.com) |
| 3 points by ryscrilla 8 months ago | past |
|
| | Using Large Language Models to Catch Vulnerabilities (googleprojectzero.blogspot.com) |
| 175 points by sigmar 9 months ago | past | 29 comments |
|
| | Effective Fuzzing: A Dav1d Case Study (googleprojectzero.blogspot.com) |
| 14 points by belter 10 months ago | past |
|
| | Shouldn't have happened: A vulnerability postmortem (2021) (googleprojectzero.blogspot.com) |
| 43 points by fanf2 10 months ago | past | 9 comments |
|
| | The Windows Registry Adventure #3: Learning Resources (googleprojectzero.blogspot.com) |
| 5 points by transpute on June 28, 2024 | past |
|
| | Evaluating Offensive Security Capabilities of Large Language Models (googleprojectzero.blogspot.com) |
| 2 points by underanalyzer on June 23, 2024 | past |
|
| | Project Naptime: Evaluating Offensive Security Capabilities of LLMs (googleprojectzero.blogspot.com) |
| 1 point by wild_pointer on June 21, 2024 | past |
|
| | Project Naptime: Evaluating Offensive Security Capabilities of LLMs (googleprojectzero.blogspot.com) |
| 4 points by surteen on June 20, 2024 | past |
|
| | Driving forward in Android drivers (googleprojectzero.blogspot.com) |
| 103 points by idiocrat on June 14, 2024 | past | 9 comments |
|
| | Driving Forward in Android Drivers (googleprojectzero.blogspot.com) |
| 4 points by alphabetting on June 13, 2024 | past |
|
| | A Brief History of the Windows Registry (googleprojectzero.blogspot.com) |
| 3 points by aragonite on May 13, 2024 | past |
|
| | The Windows Registry Adventure #1: Introduction and research results (googleprojectzero.blogspot.com) |
| 2 points by xrayarx on April 22, 2024 | past |
|
| | The Windows Registry Adventure #1: Introduction and research results (googleprojectzero.blogspot.com) |
| 1 point by Verath on April 19, 2024 | past |
|
| | The Windows Registry Adventure (googleprojectzero.blogspot.com) |
| 1 point by ShadowRegent on April 19, 2024 | past | 1 comment |
|
| | The Windows Registry Adventure (Google Project Zero / J00ru) (googleprojectzero.blogspot.com) |
| 2 points by gynvael on April 18, 2024 | past |
|
| | First Handset with MTE on the Market (googleprojectzero.blogspot.com) |
| 85 points by sintax on Nov 3, 2023 | past | 18 comments |
|
| | An analysis of an in-the-wild iOS Safari WebContent to GPU Process exploit (googleprojectzero.blogspot.com) |
| 4 points by DavidChouinard on Oct 14, 2023 | past |
|
| | An analysis of an in-the-wild iOS Safari WebContent to GPU Process exploit (googleprojectzero.blogspot.com) |
| 3 points by skilled on Oct 13, 2023 | past |
|
| | Google wants manufacturers to roll out updates faster (googleprojectzero.blogspot.com) |
| 2 points by skilled on Sept 20, 2023 | past |
|
|
| More |
