home.social

#googleprojectzero — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #googleprojectzero, aggregated by home.social.

fetched live
  1. Google Project Zero has unveiled a full 0-click to root exploit chain for the Pixel 10, leveraging a Dolby bug and a kernel flaw. This sophisticated attack bypassed all user interaction, granting attackers complete control over unpatched devices. It's a stark reminder of the ongoing challenge in securing complex mobile hardware against advanced threats.

    tpp.blog/2nu7ict

    #cybersecurity #pixel10 #googleprojectzero

    🤖 This post was AI-generated.

  2. Google's Project Zero: where they defeat advanced security measures by doing absolutely 🤷 nothing. Apparently, the best way to crack #KASLR is to sit back and let the linear mapping do it for you. Who knew hacking could be so chill? 🍹🔓
    googleprojectzero.blogspot.com #GoogleProjectZero #HackingChill #CyberSecurity #LinearMapping #HackerNews #ngated

  3. Google's Project Zero: where they defeat advanced security measures by doing absolutely 🤷 nothing. Apparently, the best way to crack #KASLR is to sit back and let the linear mapping do it for you. Who knew hacking could be so chill? 🍹🔓
    googleprojectzero.blogspot.com #GoogleProjectZero #HackingChill #CyberSecurity #LinearMapping #HackerNews #ngated

  4. I’m looking for a feed that aggregates recent reverse engineering and vulnerability centric security writeups, like the ones posted by Google project zero. I know there are many different security firms and academics that post these kind of articles now and then, but I’m having a hard time with discovery as every news site or feed I find is focused on cybersecurity threats and CVEs, or simply just malware actor reports.

    Does anyone have something that fits the bill?
    #reverseengineering #googleprojectzero #projectzero #vulnerability #vulnerability_research

  5. I’m looking for a feed that aggregates recent reverse engineering and vulnerability centric security writeups, like the ones posted by Google project zero. I know there are many different security firms and academics that post these kind of articles now and then, but I’m having a hard time with discovery as every news site or feed I find is focused on cybersecurity threats and CVEs, or simply just malware actor reports.

    Does anyone have something that fits the bill?
    #reverseengineering #googleprojectzero #projectzero #vulnerability #vulnerability_research

  6. If I would drive one of the latest #Volkswagen models (including #Audi #Seat #Skoda #Porsche and more) I would be worried a little bit.
    Usually in this kind of electronics the Volkswagen brands use the same or similar base tech stack.

    I hope they got faster in their defect fixing and roll out.

    I would like to know which models are affected as of now.

    sammobile.com/news/three-new-s

    #ExynosModem #Samsung #GoogleProjectZero #ZeroDayExploit #CVE-2023-24033

  7. If I would drive one of the latest #Volkswagen models (including #Audi #Seat #Skoda #Porsche and more) I would be worried a little bit.
    Usually in this kind of electronics the Volkswagen brands use the same or similar base tech stack.

    I hope they got faster in their defect fixing and roll out.

    I would like to know which models are affected as of now.

    sammobile.com/news/three-new-s

    #ExynosModem #Samsung #GoogleProjectZero #ZeroDayExploit #CVE-2023-24033

  8. nvd.nist.gov/vuln/detail/CVE-2

    I wonder how long the time to production for typical car manufacturers is to fix this CVE and really deploy it at each affected car.

    Which car manufacturers use them in which models?

    #ExynosModem #GoogleProjectZero #Samsung #ZeroDayExploit

  9. nvd.nist.gov/vuln/detail/CVE-2

    I wonder how long the time to production for typical car manufacturers is to fix this CVE and really deploy it at each affected car.

    Which car manufacturers use them in which models?

    #ExynosModem #GoogleProjectZero #Samsung #ZeroDayExploit

  10. Googles Project-Zero-Sicherheitsteam hat das erste halbe Jahr 2022 analysiert: 18 Zero-Day-Lücken haben Cyberkriminelle in freier Wildbahn missbraucht.
    Im ersten Halbjahr 2022 bereits 18 Zero-Day-Lücken ausgenutzt
  11. Googles Project-Zero hat ausgewertet, wie sich die Hersteller beim Schließen von Sicherheitslücken schlagen. Sie sind deutlich schneller geworden.
    Positiver Trend: Hersteller schließen Sicherheitslücken schneller
  12. Immer kleiner werdende Strukturen lassen die Reichweite des Rowhammer-Angriffs wachsen. Zudem reduzieren sie die Wirkung der Abwehrmaßnahmen. Winzige Chip-Strukturen verschlimmern Hardware-Angriff Rowhammer
  13. Um mehr Zeit für Updates zu geben, wird Google gefundene Zero-Day-Lücken erst 30 Tage nach Update-Verfügbarkeit verraten. Bei akuter Gefahr kanns flotter gehen. Googles Project Zero wird Sicherheitslücken verzögert veröffentlichen
  14. Security-Experten des Internet-Riesen erkennen Software-Schwachstellen in immer wieder den gleichen Bereichen – und fordern eine bessere Grundabsicherung.
    Google: Hersteller machen es Hackern zu leicht
  15. Ein Bug in iOS erlaubte es, Daten aus iPhones in Funkreichweite auszulesen – ohne Interaktion. Auch ein Wurm sei möglich gewesen, meint ein Sicherheitsforscher.
    Exploit übernimmt iPhones in der Umgebung – Apple-Patch liegt vor
  16. Gepatchte Sicherheitslücken sind der Hauptgrund dafür, dass man die gerade veröffentlichten Updates dringend einspielen sollte.
    Sicherheitslücken: Apple aktualisiert auch alte iPhones, iPads und Watch-Geräte
  17. Apple-Nutzer sollten ihr Betriebssystem zügig aktualisieren, kritische Lücken werden wohl für Angriffe verwendet. Nicht alle Systemversionen erhalten Updates.
    Schwachstellen in iOS werden aktiv ausgenutzt – kein Update für iOS 13