googleprojectzero.blogspot.com

Project Zero 2022-05-10 20:17 UTC
Release of Technical Report into the AMD Security Processor

Posted by James Forshaw, Google Project …
Project Zero 2022-04-19 20:13 UTC
The More You Know, The More You Know You Don’t Know (Apr)
Project Zero 2022-04-19 16:12 UTC
The More You Know, The More You Know You Don’t Know

A Year in Review of 0-days Used In-the-Wild in …
Project Zero 2022-04-16 04:13 UTC
CVE-2021-1782, an iOS in-the-wild vulnerability in… (Apr)
Project Zero 2022-04-16 00:14 UTC
CVE-2021-1782, an iOS in-the-wild vulnerability in vouchers

This blog post is my analysis of a …
Project Zero 2022-04-08 00:13 UTC
CVE-2021-30737, @xerub's 2021 iOS ASN.1 Vulnerability (Apr)
Project Zero 2022-04-07 16:15 UTC
CVE-2021-30737, @xerub's 2021 iOS ASN.1 Vulnerability

Posted by Ian Beer, Google Project Zero
This …
Project Zero 2022-04-01 20:15 UTC
FORCEDENTRY: Sandbox Escape (Mar)
Project Zero 2022-03-31 16:16 UTC
FORCEDENTRY: Sandbox Escape

We want to thank Citizen Lab for sharing a sample of the FORCEDENTRY …
Project Zero 2022-03-25 04:14 UTC
Racing against the clock – hitting a tiny kernel … (Mar)
Project Zero 2022-03-25 00:13 UTC
Racing against the clock – hitting a tiny kernel race window

TL;DR:
How to make a tiny kernel …
Project Zero 2022-02-12 16:14 UTC
A walk through Project Zero metrics (Feb)
Project Zero 2022-02-10 20:15 UTC
A walk through Project Zero metrics

Posted by Ryan Schoen, Project Zero
tl;dr
In 2021, vendors took …
Project Zero 2022-02-08 00:15 UTC
How a simple Linux kernel memory corruption bug c… (Oct)
Project Zero 2022-01-21 12:15 UTC
Zooming in on Zero-click Exploits (Jan)
Project Zero 2022-01-18 20:16 UTC
Zooming in on Zero-click Exploits

Posted by Natalie Silvanovich, Project Zero
Zoom is a video …
Project Zero 2021-12-16 04:16 UTC
A deep dive into an NSO zero-click iMessage exploi… (Dec)
Project Zero 2021-12-15 20:15 UTC
A deep dive into an NSO zero-click iMessage exploit: Remote Code Execution

Posted by Ian Beer & …
Project Zero 2021-12-02 08:17 UTC
This shouldn't have happened: A vulnerability post… (Dec)
Project Zero 2021-12-01 20:15 UTC
This shouldn't have happened: A vulnerability postmortem

Posted by Tavis Ormandy, Project Zero
This …
Project Zero 2021-10-22 08:16 UTC
Windows Exploitation Tricks: Relaying DCOM Authent… (Oct)
Using Kerberos for Authentication …
Project Zero 2021-10-21 16:16 UTC
Windows Exploitation Tricks: Relaying DCOM Authentication

Posted by James Forshaw, Project Zero
In …
Project Zero 2021-10-20 04:16 UTC
How a simple Linux kernel memory corruption bug ca… (Oct)
Project Zero 2021-10-19 16:16 UTC
How a simple Linux kernel memory corruption bug can lead to complete system compromise

An analysis …
Project Zero 2021-10-05 04:16 UTC
Fuzzing Closed-Source JavaScript Engines with Cove… (Sep)
Understanding Network Access in …
Project Zero 2021-09-28 08:13 UTC
Tuesday, September 14, 2021
tl;dr I combined Fuzzilli (an open-source JavaScript engine fuzzer), …
Project Zero 2021-09-20 20:16 UTC
Edit 2021-09-20 : The version of Swift for Windows used in this project was from January 2021, when …
Project Zero 2021-09-16 12:14 UTC
Fuzzing Closed-Source JavaScript Engines with Cove… (Sep)
Project Zero 2021-09-14 20:14 UTC
Fuzzing Closed-Source JavaScript Engines with Coverage Feedback

Posted by Ivan Fratric, Project …
Project Zero 2021-09-03 20:14 UTC
Posted by Ryan at 9:37 AM No comments:
Project Zero 2021-08-20 08:13 UTC
Understanding Network Access in Windows AppContainers (Aug)
Project Zero 2021-08-19 20:13 UTC
Understanding Network Access in Windows AppContainers

Posted by James Forshaw, Project Zero …
Project Zero 2021-07-01 20:15 UTC
An EPYC escape: Case-study of a KVM breakout (Jun)
Project Zero 2021-06-29 20:17 UTC
An EPYC escape: Case-study of a KVM breakout

Posted by Felix Wilhelm, Project Zero
Introduction
KVM …
Project Zero 2021-05-20 20:13 UTC
Fuzzing iOS code on macOS at native speed

Or how iOS apps on macOS work under the hood
Posted by …
Project Zero 2021-05-04 02:14 UTC
Project Zero Patch Tuesday roundup, November 2014 (Nov)
Project Zero 2021-05-03 20:14 UTC
Thursday, April 22, 2021
Project Zero 2021-04-30 10:13 UTC
[Nothing new, only with content removed]
Project Zero 2021-04-30 08:14 UTC
2021
Designing sockfuzzer, a network syscall fuzzer for… (Apr)
Policy and Disclosure: 2021 …
https://googleprojectzero.blogspot.com 2021-04-30 08:13 UTC
[Marking site as being monitored from now on]
https://googleprojectzero.blogspot.com/ 2021-04-30 04:14 UTC
[Marking site as being monitored from now on]