31
Over the Air: Exploiting Broadcom’s Wi-Fi Stack (Part 2)
Posted by Gal Beniamini, Project ZeroIn this blog post we'll continue our journey into gaining re...
Google Project Zero
Make zeroday hard
- Popular posts
- 61
- Total points
- 17,308
- HN comments
- 5,056
- Rank
- #38 company
Visit googleprojectzero.blogspot.com → RSS feedOn Hacker News Aug 2014 – Nov 2025
Security & Privacy 60Systems & Performance 39Web & Frontend 1Tools & Productivity 1Career & Management 1AI & Machine Learning 1
32
Using Large Language Models to Catch Vulnerabilities
Posted by the Big Sleep team Introduction In our previous post, Project Naptime: Evaluating Offe...
33
What a one line change did to the Chrome sandbox
Posted by James Forshaw, Project ZeroThe Chromium sandbox on Windows has stood the test of time. ...
34
Exploiting null-dereferences in the Linux kernel
Posted by Seth Jenkins, Project Zero For a fair amount of time, null-deref bugs were a highly e...
35
The curious tale of a fake Carrier.app
Posted by Ian Beer, Google Project Zero NOTE: This issue was CVE-2021-30983 was fixed in iOS 15...
36
Escaping the Safari sandbox with a kernel GPU bug
Posted by Ian BeerTL;DRAn OS X GPU driver trusted a user-supplied kernel C++ object pointer and c...
37
Searching statically-linked vulnerable library functions in executable code
Helping researchers find 0ld daysPosted by Thomas Dullien, Project ZeroExecutive summarySoftware ...
38
Racing against the clock – hitting a tiny kernel race window
TL;DR: How to make a tiny kernel race window really large even on kernels without CONFIG_PREEMPT...
39
Trust Issues: Exploiting TrustZone TEEs
Posted by Gal Beniamini, Project ZeroMobile devices are becoming an increasingly privacy-sensitiv...
40
Several months in the life of Project Zero – Part 1: The Chrome bug of suffering
Posted by Sergei Glazunov and Mark Brand, Project ZeroIntroductionIt was a normal week in the Pro...
41
Bad Binder: Android In-the-Wild Exploit
Posted by Maddie Stone, Project ZeroIntroductionOn October 3, 2019, we disclosed issue 1942 (CVE-...
42
A year of Windows kernel font fuzzing #1: the results
Posted by Mateusz Jurczyk of Google Project ZeroThis post series is about how we used at-scale fu...
43
A walk through Project Zero metrics
Posted by Ryan Schoen, Project Zerotl;drIn 2021, vendors took an average of 52 days to fix secur...
44
Virtually Unlimited Memory: Escaping the Chrome Sandbox
Posted by Mark Brand, Exploit Technique Archaeologist.IntroductionAfter discovering a collection ...
45
When ‘int’ is the new ‘short’
Posted by Mark Brand, Truncator of IntegersThis is going to be a quick post, just describing a pa...
46
FF Sandbox Escape
By James Forshaw, Project ZeroIn my previous blog post I discussed an issue with the Windows Kern...
47
On VBScript
Posted by Ivan Fratric, Google Project ZeroIntroductionVulnerabilities in the VBScript scripting ...
48
Exploiting Android Messengers with WebRTC
Posted by Natalie Silvanovich, Project ZeroThis is a three-part series on exploiting messenger ap...
49
Adventures in Video Conferencing Part 1: The Wild World of WebRTC
Posted by Natalie Silvanovich, Project ZeroOver the past five years, video conferencing support i...
50
Zooming in on Zero-Click Exploits
Posted by Natalie Silvanovich, Project Zero Zoom is a video conferencing platform that has ...
51
Exploiting Windows 10 in a Local Network with WPAD/PAC and JScript
by Ivan Fratric, Thomas Dullien, James Forshaw and Steven VittitoeIntroMany widely-deployed techn...
52
A survey of recent iOS kernel exploits
Posted by Brandon Azad, Project ZeroI recently found myself wishing for a single online reference...
53
The quantum state of Linux kernel garbage collection
A deep dive into an in-the-wild Android exploit Guest Post by Xingyu Jin, Android Security Resea...
54
The Great DOM Fuzz-Off of 2017
Posted by Ivan Fratric, Project ZeroIntroductionHistorically, DOM engines have been one of the la...
55
The Definitive Guide on Win32 to NT Path Conversion (2016)
Posted by James Forshaw, path’ological reverse engineer.How the Win32 APIs process file pat...
56
Defeating KASLR by doing nothing at all
IntroductionI’ve recently been researching Pixel kernel exploitation and as part of this research...
57
Mitigations are attack surface, too
Posted by Jann Horn, Project ZeroIntroductionThis blog post discusses a bug leading to memory cor...
58
Driving forward in Android drivers
Posted by Seth Jenkins, Google Project ZeroIntroduction Android's open-source ecosystem has ...
59
Race you to the kernel
Posted by Ian Beer of Google Project ZeroThe OS X and iOS kernel code responsible for loading a s...
60
Breaking the Chain
Posted by James Forshaw, Wielder of Bolt Cutters.Much as we’d like it to be true, it seems ...