That time when @tehjh was just reviewing a new Linux kernel feature, found a security vuln, then went on a journey to see if he could exploit it from inside the Chrome Linux Desktop renderer sandbox (spoiler: very yes) googleprojectzero.blogspot.c…

Great to see this live! Let's see how the trial pans out 🍿👀

Part 7 (!) of @j00ru's Windows Registry adventure is now live: googleprojectzero.blogspot.c… "I will describe the various areas that are important in the context of low-level security research... all possible entry points to attack the registry... and the primitives they generate"🙌

For those that won't be in Germany next weekend to see @dillon_franke live, this is the next best thing! (post also includes Dillon's fuzzing harness and tools Dillon built along the way) 🎉

...and now, introducing Part 6 of @j00ru's work on the Windows Registry: googleprojectzero.blogspot.c… 📖👀

Two new posts from @tiraniddo today: googleprojectzero.blogspot.c… on reviving a memory trapping primitive from his 2021 post. googleprojectzero.blogspot.c… where he shares a bug class and demonstrates how you can get a COM object trapped in a more privileged process. Happy Reading! 📚

It doesn't happen very often, but Project Zero is hiring! goo.gle/41DBQBY Please share with anyone you think would be awesome for the role 🎉 Looking for at least one person. DMs open if you want to reach out about the role. The team: youtu.be/My_13FXODdU

Part 5 of @j00ru's Windows Registry Adventure is out! googleprojectzero.blogspot.c… Incredible depth of knowledge on display, and good to see it shared as a reference with the world ❤️

If you've ever wondered if one can determine a vuln from just the kernel panic logs, @__sethJenkins (feat. @tehjh & @benoitsevens) have something to share: googleprojectzero.blogspot.c… Great to collaborate with @amnesty, find vulns and get them fixed: securitylab.amnesty.org/late…

Finding 0day is not the most impactful thing that Project Zero does 😲 — it's sharing knowledge 🧠. One part of that sharing is our tooling work to help other devs and reserachers. Today's installment, @tiraniddo's updated OleView.NET👍 Blog: googleprojectzero.blogspot.c…

Project Zero Blogpost recap for the month: googleprojectzero.blogspot.c… — @j00ru doing another deep dive into the Windows Registry googleprojectzero.blogspot.c… — Nick Galloway's dav1d fuzzing case study (new) googleprojectzero.blogspot.c… — an update on using LLMs to find vulns Enjoy! 🎉

"While... public and in-the-wild research on Android GPU drivers [exists], other chipset components may not be as frequently audited so this research sought to explore those drivers in greater detail." Hot tip: There's a video version and a proof of concept exploit at the end👍

Join @j00ru as he shares his research/adventure through the Windows Registry: googleprojectzero.blogspot.c… 50 CVEs is just the beginning. Future posts will explore the attack surface, history, practical exploitation using hive memory corruption, cell indexes and other good times🎉

Great to see srldf.org working as intended! This fund would have never launched without the hard work of many, but a special shoutout to @HarleyGeiger and @charley_snyder_ to making srldf.org a reality.

New Project Zero blogpost by Mark Brand - first mobile device ships with MTE (and how to enable it). "MTE on a production handset for the first time is a big step forward... there's real potential to use this technology to make 0-day harder". googleprojectzero.blogspot.c…