Tag: Project Zero
-
Schneier on Security: Google Project Zero Changes Its Disclosure Policy
Source URL: https://www.schneier.com/blog/archives/2025/08/google-project-zero-changes-its-disclosure-policy.html Source: Schneier on Security Title: Google Project Zero Changes Its Disclosure Policy Feedly Summary: Google’s vulnerability finding team is again pushing the envelope of responsible disclosure: Google’s Project Zero team will retain its existing 90+30 policy regarding vulnerability disclosures, in which it provides vendors with 90 days before full disclosure takes place,…
-
The Register: Asus lets processor security fix slip out early, AMD confirms patch in progress
Source URL: https://www.theregister.com/2025/01/23/asus_amd_processor_fix/ Source: The Register Title: Asus lets processor security fix slip out early, AMD confirms patch in progress Feedly Summary: Answers on a postcard to what ‘Microcode Signature Verification Vulnerability’ might mean AMD has confirmed at least some of its microprocessors suffer a microcode-related security vulnerability, the existence of which accidentally emerged this…
-
Hacker News: The Qualcomm DSP Driver – Unexpectedly Excavating an Exploit
Source URL: https://googleprojectzero.blogspot.com/2024/12/qualcomm-dsp-driver-unexpectedly-excavating-exploit.html Source: Hacker News Title: The Qualcomm DSP Driver – Unexpectedly Excavating an Exploit Feedly Summary: Comments AI Summary and Description: Yes Summary: The text provides a detailed technical analysis of multiple security vulnerabilities discovered in the adsprpc driver utilized in Qualcomm chips. Highlighting vulnerabilities that have direct implications for the security of…
-
Slashdot: Google’s Big Sleep LLM Agent Discovers Exploitable Bug In SQLite
Source URL: https://tech.slashdot.org/story/24/11/05/1532207/googles-big-sleep-llm-agent-discovers-exploitable-bug-in-sqlite?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Google’s Big Sleep LLM Agent Discovers Exploitable Bug In SQLite Feedly Summary: AI Summary and Description: Yes **Summary:** Google has leveraged a large language model (LLM) agent, “Big Sleep,” to identify a previously undiscovered memory vulnerability in SQLite, marking a significant advancement in automated vulnerability discovery. This initiative showcases…
-
The Register: Google claims Big Sleep ‘first’ AI to spot freshly committed security bug that fuzzing missed
Source URL: https://www.theregister.com/2024/11/05/google_ai_vulnerability_hunting/ Source: The Register Title: Google claims Big Sleep ‘first’ AI to spot freshly committed security bug that fuzzing missed Feedly Summary: You snooze, you lose, er, win Google claims one of its AI models is the first of its kind to spot a memory safety vulnerability in the wild – specifically an…